SUSE-SU-2019:1422-1

See a problem?
Please try reporting it to the source first.

Source

https://www.suse.com/support/update/announcement/2019/suse-su-20191422-1/

Import Source

https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2019:1422-1.json

JSON Data

https://api.osv.dev/v1/vulns/SUSE-SU-2019:1422-1

Related

CVE-2018-14734

Published

2019-06-05T08:34:19Z

Modified

2019-06-05T08:34:19Z

Summary

Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP2)

Details

This update for the Linux Kernel 4.4.121-92_85 fixes one issue.

The following security issue was fixed:

CVE-2018-14734: drivers/infiniband/core/ucma.c allowed ucmaleavemulticast to access a certain data structure after a cleanup step in ucmaprocessjoin, which allows attackers to cause a denial of service (use-after-free) (bsc#1131390).

References

Affected packages

SUSE:Linux Enterprise Live Patching 12 SP3 / kgraft-patch-SLE12-SP3_Update_13

Package

Name: kgraft-patch-SLE12-SP3_Update_13
Purl: purl:rpm/suse/kgraft-patch-SLE12-SP3_Update_13&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_4_132-94_33-default": "10-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 SP3 / kgraft-patch-SLE12-SP3_Update_14

Package

Name: kgraft-patch-SLE12-SP3_Update_14
Purl: purl:rpm/suse/kgraft-patch-SLE12-SP3_Update_14&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_4_138-94_39-default": "8-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 SP3 / kgraft-patch-SLE12-SP3_Update_15

Package

Name: kgraft-patch-SLE12-SP3_Update_15
Purl: purl:rpm/suse/kgraft-patch-SLE12-SP3_Update_15&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_4_140-94_42-default": "8-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 SP3 / kgraft-patch-SLE12-SP3_Update_13

Package

Name: kgraft-patch-SLE12-SP3_Update_13
Purl: purl:rpm/suse/kgraft-patch-SLE12-SP3_Update_13&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_4_132-94_33-default": "10-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 SP3 / kgraft-patch-SLE12-SP3_Update_14

Package

Name: kgraft-patch-SLE12-SP3_Update_14
Purl: purl:rpm/suse/kgraft-patch-SLE12-SP3_Update_14&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_4_138-94_39-default": "8-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 SP3 / kgraft-patch-SLE12-SP3_Update_15

Package

Name: kgraft-patch-SLE12-SP3_Update_15
Purl: purl:rpm/suse/kgraft-patch-SLE12-SP3_Update_15&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_4_140-94_42-default": "8-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 SP3 / kgraft-patch-SLE12-SP3_Update_13

Package

Name: kgraft-patch-SLE12-SP3_Update_13
Purl: purl:rpm/suse/kgraft-patch-SLE12-SP3_Update_13&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_4_132-94_33-default": "10-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 SP3 / kgraft-patch-SLE12-SP3_Update_14

Package

Name: kgraft-patch-SLE12-SP3_Update_14
Purl: purl:rpm/suse/kgraft-patch-SLE12-SP3_Update_14&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_4_138-94_39-default": "8-2.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 SP3 / kgraft-patch-SLE12-SP3_Update_15

Package

Name: kgraft-patch-SLE12-SP3_Update_15
Purl: purl:rpm/suse/kgraft-patch-SLE12-SP3_Update_15&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012%20SP3

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_4_140-94_42-default": "8-2.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP1 / kgraft-patch-SLE12-SP1_Update_29

Package

Name: kgraft-patch-SLE12-SP1_Update_29
Purl: purl:rpm/suse/kgraft-patch-SLE12-SP1_Update_29&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-3_12_74-60_64_96-xen": "10-2.1",
            "kgraft-patch-3_12_74-60_64_96-default": "10-2.1"
        }
    ]
}

SUSE:Linux Enterprise Server for SAP Applications 12 SP2 / kgraft-patch-SLE12-SP2_Update_23

Package

Name: kgraft-patch-SLE12-SP2_Update_23
Purl: purl:rpm/suse/kgraft-patch-SLE12-SP2_Update_23&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_4_121-92_85-default": "8-2.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12-LTSS / kgraft-patch-SLE12_Update_36

Package

Name: kgraft-patch-SLE12_Update_36
Purl: purl:rpm/suse/kgraft-patch-SLE12_Update_36&distro=SUSE%20Linux%20Enterprise%20Server%2012-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-3_12_61-52_136-default": "10-2.1",
            "kgraft-patch-3_12_61-52_136-xen": "10-2.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP1-LTSS / kgraft-patch-SLE12-SP1_Update_29

Package

Name: kgraft-patch-SLE12-SP1_Update_29
Purl: purl:rpm/suse/kgraft-patch-SLE12-SP1_Update_29&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

10-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-3_12_74-60_64_96-xen": "10-2.1",
            "kgraft-patch-3_12_74-60_64_96-default": "10-2.1"
        }
    ]
}

SUSE:Linux Enterprise Server 12 SP2-LTSS / kgraft-patch-SLE12-SP2_Update_23

Package

Name: kgraft-patch-SLE12-SP2_Update_23
Purl: purl:rpm/suse/kgraft-patch-SLE12-SP2_Update_23&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP2-LTSS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

8-2.1

Ecosystem specific

{
    "binaries": [
        {
            "kgraft-patch-4_4_121-92_85-default": "8-2.1"
        }
    ]
}