Security update for the Linux Kernel

SUSE Security Update: Security update for the Linux Kernel
Announcement ID: SUSE-SU-2019:14127-1
Rating: important
References: #1063416 #1090078 #1102340 #1120758 #1134395 #1134835 #1135650 #1136424 #1137194 #1138943 #1139751
Cross-References:CVE-2018-20836 CVE-2018-5390 CVE-2019-12614 CVE-2019-3459 CVE-2019-3460 CVE-2019-3846 CVE-2019-3896
Affected Products:
  • SUSE Linux Enterprise Server 11-SP4-LTSS
  • SUSE Linux Enterprise Server 11-EXTRA
  • SUSE Linux Enterprise Debuginfo 11-SP4

An update that solves 7 vulnerabilities and has four fixes is now available.

Description:


The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:

  • CVE-2019-3459: A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel(bnc#1120758).
  • CVE-2019-3460: A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before (bnc#1120758).
  • CVE-2019-3896: A double-free could happen in idr_remove_all() in lib/idr.c in the Linux kernel. An unprivileged local attacker could use this flaw for a privilege escalation or for a system crash and a denial of service (DoS) (bnc#1138943).
  • CVE-2018-5390: The Linux kernel could be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which could lead to a denial of service (bnc#1102340).
  • CVE-2018-20836: An issue was discovered in the Linux kernel There was a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free (bnc#1134395).
  • CVE-2019-12614: An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel There was an unchecked kstrdup of prop-name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash) (bnc#1137194).
  • CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network (bnc#1136424 1136446).

The following non-security bugs were fixed:
  • KEYS: do not let add_key() update an uninstantiated key (bnc#1063416).
  • fnic: Fix to cleanup aborted IO to avoid device being offlined by mid-layer (bsc#1134835).
  • signal: give SEND_SIG_FORCED more power to beat SIGNAL_UNKILLABLE (bsc#1135650).
  • signal: oom_kill_task: use SEND_SIG_FORCED instead of force_sig() (bsc#1135650).
  • tcp: a regression in the previous fix for the TCP SACK issue was fixed (bnc#1139751)

Special Instructions and Notes:

Please reboot the system after installing this update.

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Linux Enterprise Server 11-SP4-LTSS:
    zypper in -t patch slessp4-kernel-source-14127=1
  • SUSE Linux Enterprise Server 11-EXTRA:
    zypper in -t patch slexsp3-kernel-source-14127=1
  • SUSE Linux Enterprise Debuginfo 11-SP4:
    zypper in -t patch dbgsp4-kernel-source-14127=1

Package List:

  • SUSE Linux Enterprise Server 11-SP4-LTSS (i586 ppc64 s390x x86_64):
    • kernel-default-3.0.101-108.98.1
    • kernel-default-base-3.0.101-108.98.1
    • kernel-default-devel-3.0.101-108.98.1
    • kernel-source-3.0.101-108.98.1
    • kernel-syms-3.0.101-108.98.1
    • kernel-trace-3.0.101-108.98.1
    • kernel-trace-base-3.0.101-108.98.1
    • kernel-trace-devel-3.0.101-108.98.1
  • SUSE Linux Enterprise Server 11-SP4-LTSS (i586 x86_64):
    • kernel-ec2-3.0.101-108.98.1
    • kernel-ec2-base-3.0.101-108.98.1
    • kernel-ec2-devel-3.0.101-108.98.1
    • kernel-xen-3.0.101-108.98.1
    • kernel-xen-base-3.0.101-108.98.1
    • kernel-xen-devel-3.0.101-108.98.1
  • SUSE Linux Enterprise Server 11-SP4-LTSS (ppc64):
    • kernel-bigmem-3.0.101-108.98.1
    • kernel-bigmem-base-3.0.101-108.98.1
    • kernel-bigmem-devel-3.0.101-108.98.1
    • kernel-ppc64-3.0.101-108.98.1
    • kernel-ppc64-base-3.0.101-108.98.1
    • kernel-ppc64-devel-3.0.101-108.98.1
  • SUSE Linux Enterprise Server 11-SP4-LTSS (s390x):
    • kernel-default-man-3.0.101-108.98.1
  • SUSE Linux Enterprise Server 11-SP4-LTSS (i586):
    • kernel-pae-3.0.101-108.98.1
    • kernel-pae-base-3.0.101-108.98.1
    • kernel-pae-devel-3.0.101-108.98.1
  • SUSE Linux Enterprise Server 11-EXTRA (i586 ia64 ppc64 s390x x86_64):
    • kernel-default-extra-3.0.101-108.98.1
  • SUSE Linux Enterprise Server 11-EXTRA (i586 x86_64):
    • kernel-xen-extra-3.0.101-108.98.1
  • SUSE Linux Enterprise Server 11-EXTRA (x86_64):
    • kernel-trace-extra-3.0.101-108.98.1
  • SUSE Linux Enterprise Server 11-EXTRA (ppc64):
    • kernel-ppc64-extra-3.0.101-108.98.1
  • SUSE Linux Enterprise Server 11-EXTRA (i586):
    • kernel-pae-extra-3.0.101-108.98.1
  • SUSE Linux Enterprise Debuginfo 11-SP4 (i586 ppc64 s390x x86_64):
    • kernel-default-debuginfo-3.0.101-108.98.1
    • kernel-default-debugsource-3.0.101-108.98.1
    • kernel-trace-debuginfo-3.0.101-108.98.1
    • kernel-trace-debugsource-3.0.101-108.98.1
  • SUSE Linux Enterprise Debuginfo 11-SP4 (i586 s390x x86_64):
    • kernel-default-devel-debuginfo-3.0.101-108.98.1
    • kernel-trace-devel-debuginfo-3.0.101-108.98.1
  • SUSE Linux Enterprise Debuginfo 11-SP4 (i586 x86_64):
    • kernel-ec2-debuginfo-3.0.101-108.98.1
    • kernel-ec2-debugsource-3.0.101-108.98.1
    • kernel-xen-debuginfo-3.0.101-108.98.1
    • kernel-xen-debugsource-3.0.101-108.98.1
    • kernel-xen-devel-debuginfo-3.0.101-108.98.1
  • SUSE Linux Enterprise Debuginfo 11-SP4 (ppc64):
    • kernel-bigmem-debuginfo-3.0.101-108.98.1
    • kernel-bigmem-debugsource-3.0.101-108.98.1
    • kernel-ppc64-debuginfo-3.0.101-108.98.1
    • kernel-ppc64-debugsource-3.0.101-108.98.1
  • SUSE Linux Enterprise Debuginfo 11-SP4 (i586):
    • kernel-pae-debuginfo-3.0.101-108.98.1
    • kernel-pae-debugsource-3.0.101-108.98.1
    • kernel-pae-devel-debuginfo-3.0.101-108.98.1

References: