SUSE-SU-2019:0828-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2019/suse-su-20190828-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:0828-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/SUSE-SU-2019:0828-1
Upstream
Related
Published
2019-04-01T09:28:05Z
Modified
2025-05-08T17:04:14.392006Z
Summary
Security update for the Linux Kernel
Details

The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

  • CVE-2019-2024: A use-after-free when disconnecting a source was fixed which could lead to crashes. bnc#1129179).
  • CVE-2019-9213: expand_downwards in mm/mmap.c lacked a check for the mmap minimum address, which made it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task (bnc#1128166).
  • CVE-2018-14633: A security flaw was found in the chapservercompute_md5() function in the ISCSI target code in the Linux kernel in a way an authentication request from an ISCSI initiator is processed. (bnc#1107829).
  • CVE-2019-7221: The KVM implementation in the Linux kernel had a Use-after-Free (bnc#1124732).
  • CVE-2019-7222: The KVM implementation in the Linux kernel had an Information Leak (bnc#1124735).
  • CVE-2019-6974: kvmioctlcreatedevice in virt/kvm/kvmmain.c mishandled reference counting because of a race condition, which led to a use-after-free (bnc#1124728).

The following non-security bugs were fixed:

  • copymountstring: Limit string length to PATH_MAX (bsc#1082943).
  • enic: add wq clean up budget (bsc#1075697, bsc#1120691. bsc#1102959).
  • ibmvscsi: Fix empty event pool access during host removal (bsc#1119019).
  • ipv4: ipv6: Adjust the frag mem limit after truesize has been changed (bsc#1110286).
  • kmps: obsolete older KMPs of the same flavour (bsc#1127155, bsc#1109137).
  • netfilter: ipv6: Adjust the frag mem limit after truesize has been changed (bsc#1110286).
  • perf/x86: Add sysfs entry to freeze counters on SMI (bsc#1121805).
  • perf/x86/intel: Delay memory deallocation until x86pmudead_cpu() (bsc#1121805).
  • perf/x86/intel: Do not enable freeze-on-smi for PerfMon V1 (bsc#1121805).
  • perf/x86/intel: Fix memory corruption (bsc#1121805).
  • perf/x86/intel: Generalize dynamic constraint creation (bsc#1121805).
  • perf/x86/intel: Implement support for TSX Force Abort (bsc#1121805).
  • perf/x86/intel: Make cpuc allocations consistent (bsc#1121805).
  • pseries/energy: Use OF accessor function to read ibm,drc-indexes (bsc#1129080).
  • restore condresched() in shrinkdcache_parent() (bsc#1098599, bsc#1105402, bsc#1127758).
  • rps: flowdissector: Fix uninitialized flowkeys used in _skbget_hash possibly (bsc#1108145).
  • scsi: megaraidsas: Send SYNCHRONIZECACHE for VD to firmware (bsc#1121698).
  • scsi: sym53c8xx: fix NULL pointer dereference panic in symintsir() (bsc#1125315).
  • x86: Add TSX Force Abort CPUID/MSR (bsc#1121805).
  • x86: respect memory size limiting via mem= parameter (bsc#1117645).
  • x86/spectre_v2: Do not check microcode versions when running under hypervisors (bsc#1122821).
  • x86/xen: dont add memory above max allowed allocation (bsc#1117645).
  • xen-netfront: Fix hang on device removal (bnc#1012382).
  • xfrm: use complete IPv6 addresses for hash (bsc#1109330).
  • xfs: remove filestream item xfs_inode reference (bsc#1127961).
References

Affected packages

SUSE:Enterprise Storage 4

kernel-default

Package

Name
kernel-default
Purl
pkg:rpm/suse/kernel-default&distro=SUSE%20Enterprise%20Storage%204

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.121-92.104.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kgraft-patch-4_4_121-92_104-default": "1-3.3.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}

kernel-source

Package

Name
kernel-source
Purl
pkg:rpm/suse/kernel-source&distro=SUSE%20Enterprise%20Storage%204

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.121-92.104.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kgraft-patch-4_4_121-92_104-default": "1-3.3.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}

kernel-syms

Package

Name
kernel-syms
Purl
pkg:rpm/suse/kernel-syms&distro=SUSE%20Enterprise%20Storage%204

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.121-92.104.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kgraft-patch-4_4_121-92_104-default": "1-3.3.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}

kgraft-patch-SLE12-SP2_Update_28

Package

Name
kgraft-patch-SLE12-SP2_Update_28
Purl
pkg:rpm/suse/kgraft-patch-SLE12-SP2_Update_28&distro=SUSE%20Enterprise%20Storage%204

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1-3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kgraft-patch-4_4_121-92_104-default": "1-3.3.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}

SUSE:Linux Enterprise High Availability Extension 12 SP2

kernel-default

Package

Name
kernel-default
Purl
pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20High%20Availability%20Extension%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.121-92.104.1

Ecosystem specific 

{
    "binaries": [
        {
            "cluster-md-kmp-default": "4.4.121-92.104.1",
            "dlm-kmp-default": "4.4.121-92.104.1",
            "ocfs2-kmp-default": "4.4.121-92.104.1",
            "gfs2-kmp-default": "4.4.121-92.104.1",
            "cluster-network-kmp-default": "4.4.121-92.104.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP2-BCL

kernel-default

Package

Name
kernel-default
Purl
pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.121-92.104.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}

kernel-source

Package

Name
kernel-source
Purl
pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.121-92.104.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}

kernel-syms

Package

Name
kernel-syms
Purl
pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-BCL

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.121-92.104.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP2-LTSS

kernel-default

Package

Name
kernel-default
Purl
pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.121-92.104.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kgraft-patch-4_4_121-92_104-default": "1-3.3.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-default-man": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}

kernel-source

Package

Name
kernel-source
Purl
pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.121-92.104.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kgraft-patch-4_4_121-92_104-default": "1-3.3.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-default-man": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}

kernel-syms

Package

Name
kernel-syms
Purl
pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.121-92.104.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kgraft-patch-4_4_121-92_104-default": "1-3.3.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-default-man": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}

kgraft-patch-SLE12-SP2_Update_28

Package

Name
kgraft-patch-SLE12-SP2_Update_28
Purl
pkg:rpm/suse/kgraft-patch-SLE12-SP2_Update_28&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1-3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kgraft-patch-4_4_121-92_104-default": "1-3.3.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-default-man": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP2

kernel-default

Package

Name
kernel-default
Purl
pkg:rpm/suse/kernel-default&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.121-92.104.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kgraft-patch-4_4_121-92_104-default": "1-3.3.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}

kernel-source

Package

Name
kernel-source
Purl
pkg:rpm/suse/kernel-source&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.121-92.104.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kgraft-patch-4_4_121-92_104-default": "1-3.3.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}

kernel-syms

Package

Name
kernel-syms
Purl
pkg:rpm/suse/kernel-syms&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.121-92.104.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kgraft-patch-4_4_121-92_104-default": "1-3.3.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}

kgraft-patch-SLE12-SP2_Update_28

Package

Name
kgraft-patch-SLE12-SP2_Update_28
Purl
pkg:rpm/suse/kgraft-patch-SLE12-SP2_Update_28&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1-3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kgraft-patch-4_4_121-92_104-default": "1-3.3.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}

SUSE:OpenStack Cloud 7

kernel-default

Package

Name
kernel-default
Purl
pkg:rpm/suse/kernel-default&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.121-92.104.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kgraft-patch-4_4_121-92_104-default": "1-3.3.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-default-man": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}

kernel-source

Package

Name
kernel-source
Purl
pkg:rpm/suse/kernel-source&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.121-92.104.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kgraft-patch-4_4_121-92_104-default": "1-3.3.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-default-man": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}

kernel-syms

Package

Name
kernel-syms
Purl
pkg:rpm/suse/kernel-syms&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.4.121-92.104.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kgraft-patch-4_4_121-92_104-default": "1-3.3.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-default-man": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}

kgraft-patch-SLE12-SP2_Update_28

Package

Name
kgraft-patch-SLE12-SP2_Update_28
Purl
pkg:rpm/suse/kgraft-patch-SLE12-SP2_Update_28&distro=SUSE%20OpenStack%20Cloud%207

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1-3.3.1

Ecosystem specific 

{
    "binaries": [
        {
            "kernel-default": "4.4.121-92.104.1",
            "kgraft-patch-4_4_121-92_104-default": "1-3.3.1",
            "kernel-devel": "4.4.121-92.104.1",
            "kernel-default-man": "4.4.121-92.104.1",
            "kernel-syms": "4.4.121-92.104.1",
            "kernel-default-devel": "4.4.121-92.104.1",
            "kernel-default-base": "4.4.121-92.104.1",
            "kernel-macros": "4.4.121-92.104.1",
            "kernel-source": "4.4.121-92.104.1"
        }
    ]
}