Stay Secure with the Latest Linux Advisories

security advisorykernel patchSUSE

SUSE: 2018:2105-1 Important: Kernel Patch Local Process Inference

An update that solves one vulnerability and has one errata is now available. . SUSE Security Update: Security update for the Linux Kernel (Live Patch 24 for SLE 12) ______________________________________________________________________________ Announcement ID: SUSE-SU-2018:2105-1 Rating: important References: #1090338 #1096740 Cross-References: CVE-2018-3665 Affected Products: SUSE Linux Enterprise Server 12-LTSS ______________________________________________________________________________ An update that solves one vulnerability and has one errata is now available. Description: This update for the Linux Kernel 3.12.61-52_83 fixes several issues. The following security issue was fixed: - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from another process via a speculative execution side channel (bsc#1090338, bsc#1096740). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-2018-1430=1 Package List: - SUSE Linux Enterprise Server 12-LTSS (x86_64): kgraft-patch-3_12_61-52_83-default-10-2.1 kgraft-patch-3_12_61-52_83-xen-10-2.1 References: https://www.suse.com/security/cve/CVE-2018-3665.html https://bugzilla.suse.com/1090338 https://bugzilla.suse.com/1096740 . SUSE Linux Kernel has launched an update to address a critical vulnerability that poses the threat of unauthorized data access through local processes, enhancing system security.. SUSE Linux Update, Kernel Security, Data Inference, Local Process Issue. . Severity: Important. LinuxSecurity.com Team

Jul 27, 2018 •Important SuSE