SUSE Security Update: Security update for the Linux Kernel
______________________________________________________________________________

Announcement ID:    SUSE-SU-2019:3379-1
Rating:             important
References:         #1091041 #1119461 #1119465 #1131107 #1138190 
                    #1146544 #1146612 #1150466 #1150483 #1152631 
                    #1153811 #1154905 #1155689 #1155897 #1155898 
                    #1156187 #1157038 #1157042 #1157070 #1157143 
                    #1157158 #1157191 #1157324 #1157333 #1157464 
                    #1158132 #1158394 #1158398 #1158410 #1158413 
                    #1158417 #1158445 #1158823 #1158824 #1158827 
                    #1158834 #1158900 #1158903 #1158904 #1158954 
                    
Cross-References:   CVE-2019-14895 CVE-2019-15213 CVE-2019-16231
                    CVE-2019-18660 CVE-2019-18680 CVE-2019-18683
                    CVE-2019-18805 CVE-2019-19052 CVE-2019-19062
                    CVE-2019-19065 CVE-2019-19073 CVE-2019-19074
                    CVE-2019-19332 CVE-2019-19338 CVE-2019-19523
                    CVE-2019-19524 CVE-2019-19525 CVE-2019-19527
                    CVE-2019-19530 CVE-2019-19531 CVE-2019-19532
                    CVE-2019-19533 CVE-2019-19534 CVE-2019-19535
                    CVE-2019-19536 CVE-2019-19537
Affected Products:
                    SUSE OpenStack Cloud Crowbar 8
                    SUSE OpenStack Cloud 8
                    SUSE Linux Enterprise Server for SAP 12-SP3
                    SUSE Linux Enterprise Server 12-SP3-LTSS
                    SUSE Linux Enterprise Server 12-SP3-BCL
                    SUSE Linux Enterprise High Availability 12-SP3
                    SUSE Enterprise Storage 5
                    SUSE CaaS Platform 3.0
                    HPE Helion Openstack 8
______________________________________________________________________________

   An update that solves 26 vulnerabilities and has 14 fixes
   is now available.

Description:

   The SUSE Linux Enterprise 12 SP 3 LTSS kernel was updated to receive
   various security and bugfixes.


   The following security bugs were fixed:

   - CVE-2019-14895: A heap-based buffer overflow was discovered in the Linux
     kernel in Marvell WiFi chip driver. The flaw could occur when the
     station attempts a connection negotiation during the handling of the
     remote devices country settings. This could have allowed the remote
     device to cause a denial of service (system crash) or possibly execute
     arbitrary code (bnc#1157158).
   - CVE-2019-18660: The Linux kernel on powerpc allowed Information Exposure
     because the Spectre-RSB mitigation is not in place for all applicable
     CPUs. This is related to arch/powerpc/kernel/entry_64.S and
     arch/powerpc/kernel/security.c (bnc#1157038).
   - CVE-2019-18683: An issue was discovered in drivers/media/platform/vivid
     in the Linux kernel. It is exploitable for privilege escalation on some
     Linux distributions where local users have /dev/video0 access, but only
     if the driver happens to be loaded. There are multiple race conditions
     during streaming stopping in this driver (part of the V4L2 subsystem).
     These issues are caused by wrong mutex locking in
     vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(),
     sdr_cap_stop_streaming(), and the corresponding kthreads. At least one
     of these race conditions leads to a use-after-free (bnc#1155897).
   - CVE-2019-19062: A memory leak in the crypto_report() function in
     crypto/crypto_user_base.c in the Linux kernel allowed attackers to cause
     a denial of service (memory consumption) by triggering
     crypto_report_alg() failures (bnc#1157333).
   - CVE-2019-19065: A memory leak in the sdma_init() function in
     drivers/infiniband/hw/hfi1/sdma.c in the Linux kernel allowed attackers     to cause a denial of service (memory consumption) by triggering
     rhashtable_init() failures (bnc#1157191).
   - CVE-2019-19052: A memory leak in the gs_can_open() function in
     drivers/net/can/usb/gs_usb.c in the Linux kernel allowed attackers to
     cause a denial of service (memory consumption) by triggering
     usb_submit_urb() failures (bnc#1157324).
   - CVE-2019-19074: A memory leak in the ath9k_wmi_cmd() function in
     drivers/net/wireless/ath/ath9k/wmi.c in the Linux kernel allowed
     attackers to cause a denial of service (memory consumption)
     (bnc#1157143).
   - CVE-2019-19073: Memory leaks in drivers/net/wireless/ath/ath9k/htc_hst.c
     in the Linux kernel allowed attackers to cause a denial of service
     (memory consumption) by triggering wait_for_completion_timeout()
     failures. This affects the htc_config_pipe_credits() function, the
     htc_setup_complete() function, and the htc_connect_service() function
     (bnc#1157070).
   - CVE-2019-16231: drivers/net/fjes/fjes_main.c in the Linux kernel 5.2.14
     did not check the alloc_workqueue return value, leading to a NULL
     pointer dereference (bnc#1150466).
   - CVE-2019-18805: An issue was discovered in net/ipv4/sysctl_net_ipv4.c in
     the Linux kernel There was a net/ipv4/tcp_input.c signed integer
     overflow in tcp_ack_update_rtt() when userspace writes a very large
     integer to /proc/sys/net/ipv4/tcp_min_rtt_wlen, leading to a denial of
     service or possibly unspecified other impact (bnc#1156187).
   - CVE-2019-18680: An issue was discovered in the Linux kernel. There was a
     NULL pointer dereference in rds_tcp_kill_sock() in net/rds/tcp.c that
     will cause denial of service (bnc#1155898).
   - CVE-2019-15213: An use-after-free was fixed caused by malicious USB
     device in drivers/media/usb/dvb-usb/dvb-usb-init.c (bsc#1146544).
   - CVE-2019-19536: An uninitialized Kernel memory can leak to USB devices
     in drivers/net/can/usb/peak_usb/pcan_usb_pro.c (bsc#1158394).
   - CVE-2019-19534: An uninitialized Kernel memory can leak to USB devices
     in drivers/net/can/usb/peak_usb/pcan_usb_core.c (bsc#1158398).
   - CVE-2019-19530: An use-after-free bug that can be caused by a malicious
     USB device in the drivers/usb/class/cdc-acm.c driver (bsc#1158410).
   - CVE-2019-19524: An use-after-free bug that can be caused by a malicious
     USB device in the drivers/input/ff-memless.c driver (bsc#1158413).
   - CVE-2019-19525: An use-after-free bug that can be caused by a malicious
     USB device in the drivers/net/ieee802154/atusb.c driver (bsc#1158417).
   - CVE-2019-19531: An use-after-free in yurex_delete may lead to denial of
     service (bsc#1158445).
   - CVE-2019-19523: An use-after-free on disconnect in USB adutux
     (bsc#1158823).
   - CVE-2019-19532: An out-of-bounds write bugs that can be caused by a
     malicious USB device in the Linux kernel HID drivers (bsc#1158824).
   - CVE-2019-19332: An out-of-bounds memory write via
     kvm_dev_ioctl_get_cpuid (bsc#1158827).
   - CVE-2019-19533: An info-leak bug that can be caused by a malicious USB
     device in the drivers/media/usb/ttusb-dec/ttusb_dec.c driver
     (bsc#1158834).
   - CVE-2019-19527: An use-after-free bug that can be caused by a malicious
     USB device in the drivers/hid/usbhid/hiddev.c driver (bsc#1158900).
   - CVE-2019-19535: An info-leak bug that can be caused by a malicious USB
     device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver
     (bsc#1158903).
   - CVE-2019-19537: Two races in the USB character device registration and
     deregistration routines (bsc#1158904).
   - CVE-2019-19338: An incomplete fix for Transaction Asynchronous Abort
     (TAA) (bsc#1158954).


   The following non-security bugs were fixed:

   - hyperv: set nvme msi interrupts to unmanaged (jsc#SLE-8953,
     jsc#SLE-9221, jsc#SLE-4941, bsc#1119461, bsc#1119465, bsc#1138190,
     bsc#1154905).
   - ibmvnic: Bound waits for device queries (bsc#1155689 ltc#182047).
   - ibmvnic: Fix completion structure initialization (bsc#1155689
     ltc#182047).
   - ibmvnic: Serialize device queries (bsc#1155689 ltc#182047).
   - ibmvnic: Terminate waiting device threads after loss of service
     (bsc#1155689 ltc#182047).
   - netfilter: nf_nat: do not bug when mapping already exists (bsc#1146612).
   - powerpc/security/book3s64: Report L1TF status in sysfs (bsc#1091041).
   - powerpc/security: Fix wrong message when RFI Flush is disable
     (bsc#1131107).
   - sched/fair: WARN() and refuse to set buddy when !se->on_rq (bsc#1158132).
   - x86/alternatives: Add int3_emulate_call() selftest (bsc#1153811).
   - x86/alternatives: Fix int3_emulate_call() selftest stack corruption
     (bsc#1153811).
   - xen/pv: Fix a boot up hang revealed by int3 self test (bsc#1153811).
   - arp: Fix cache issue during Life Partition Migration (bsc#1152631).
   - futexes: Fix speed on 4.12 kernel (bsc#1157464).


Special Instructions and Notes:

   Please reboot the system after installing this update.

Patch Instructions:

   To install this SUSE Security Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE OpenStack Cloud Crowbar 8:

      zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2019-3379=1

   - SUSE OpenStack Cloud 8:

      zypper in -t patch SUSE-OpenStack-Cloud-8-2019-3379=1

   - SUSE Linux Enterprise Server for SAP 12-SP3:

      zypper in -t patch SUSE-SLE-SAP-12-SP3-2019-3379=1

   - SUSE Linux Enterprise Server 12-SP3-LTSS:

      zypper in -t patch SUSE-SLE-SERVER-12-SP3-2019-3379=1

   - SUSE Linux Enterprise Server 12-SP3-BCL:

      zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2019-3379=1

   - SUSE Linux Enterprise High Availability 12-SP3:

      zypper in -t patch SUSE-SLE-HA-12-SP3-2019-3379=1

   - SUSE Enterprise Storage 5:

      zypper in -t patch SUSE-Storage-5-2019-3379=1

   - SUSE CaaS Platform 3.0:

      To install this update, use the SUSE CaaS Platform Velum dashboard.
      It will inform you if it detects new updates and let you then trigger
      updating of the complete cluster in a controlled way.

   - HPE Helion Openstack 8:

      zypper in -t patch HPE-Helion-OpenStack-8-2019-3379=1



Package List:

   - SUSE OpenStack Cloud Crowbar 8 (x86_64):

      kernel-default-4.4.180-94.113.1
      kernel-default-base-4.4.180-94.113.1
      kernel-default-base-debuginfo-4.4.180-94.113.1
      kernel-default-debuginfo-4.4.180-94.113.1
      kernel-default-debugsource-4.4.180-94.113.1
      kernel-default-devel-4.4.180-94.113.1
      kernel-default-kgraft-4.4.180-94.113.1
      kernel-syms-4.4.180-94.113.1
      kgraft-patch-4_4_180-94_113-default-1-4.5.1
      kgraft-patch-4_4_180-94_113-default-debuginfo-1-4.5.1

   - SUSE OpenStack Cloud Crowbar 8 (noarch):

      kernel-devel-4.4.180-94.113.1
      kernel-macros-4.4.180-94.113.1
      kernel-source-4.4.180-94.113.1

   - SUSE OpenStack Cloud 8 (x86_64):

      kernel-default-4.4.180-94.113.1
      kernel-default-base-4.4.180-94.113.1
      kernel-default-base-debuginfo-4.4.180-94.113.1
      kernel-default-debuginfo-4.4.180-94.113.1
      kernel-default-debugsource-4.4.180-94.113.1
      kernel-default-devel-4.4.180-94.113.1
      kernel-default-kgraft-4.4.180-94.113.1
      kernel-syms-4.4.180-94.113.1
      kgraft-patch-4_4_180-94_113-default-1-4.5.1
      kgraft-patch-4_4_180-94_113-default-debuginfo-1-4.5.1

   - SUSE OpenStack Cloud 8 (noarch):

      kernel-devel-4.4.180-94.113.1
      kernel-macros-4.4.180-94.113.1
      kernel-source-4.4.180-94.113.1

   - SUSE Linux Enterprise Server for SAP 12-SP3 (ppc64le x86_64):

      kernel-default-4.4.180-94.113.1
      kernel-default-base-4.4.180-94.113.1
      kernel-default-base-debuginfo-4.4.180-94.113.1
      kernel-default-debuginfo-4.4.180-94.113.1
      kernel-default-debugsource-4.4.180-94.113.1
      kernel-default-devel-4.4.180-94.113.1
      kernel-default-kgraft-4.4.180-94.113.1
      kernel-syms-4.4.180-94.113.1
      kgraft-patch-4_4_180-94_113-default-1-4.5.1
      kgraft-patch-4_4_180-94_113-default-debuginfo-1-4.5.1

   - SUSE Linux Enterprise Server for SAP 12-SP3 (noarch):

      kernel-devel-4.4.180-94.113.1
      kernel-macros-4.4.180-94.113.1
      kernel-source-4.4.180-94.113.1

   - SUSE Linux Enterprise Server 12-SP3-LTSS (aarch64 ppc64le s390x x86_64):

      kernel-default-4.4.180-94.113.1
      kernel-default-base-4.4.180-94.113.1
      kernel-default-base-debuginfo-4.4.180-94.113.1
      kernel-default-debuginfo-4.4.180-94.113.1
      kernel-default-debugsource-4.4.180-94.113.1
      kernel-default-devel-4.4.180-94.113.1
      kernel-syms-4.4.180-94.113.1

   - SUSE Linux Enterprise Server 12-SP3-LTSS (ppc64le x86_64):

      kernel-default-kgraft-4.4.180-94.113.1
      kgraft-patch-4_4_180-94_113-default-1-4.5.1
      kgraft-patch-4_4_180-94_113-default-debuginfo-1-4.5.1

   - SUSE Linux Enterprise Server 12-SP3-LTSS (noarch):

      kernel-devel-4.4.180-94.113.1
      kernel-macros-4.4.180-94.113.1
      kernel-source-4.4.180-94.113.1

   - SUSE Linux Enterprise Server 12-SP3-LTSS (s390x):

      kernel-default-man-4.4.180-94.113.1

   - SUSE Linux Enterprise Server 12-SP3-BCL (noarch):

      kernel-devel-4.4.180-94.113.1
      kernel-macros-4.4.180-94.113.1
      kernel-source-4.4.180-94.113.1

   - SUSE Linux Enterprise Server 12-SP3-BCL (x86_64):

      kernel-default-4.4.180-94.113.1
      kernel-default-base-4.4.180-94.113.1
      kernel-default-base-debuginfo-4.4.180-94.113.1
      kernel-default-debuginfo-4.4.180-94.113.1
      kernel-default-debugsource-4.4.180-94.113.1
      kernel-default-devel-4.4.180-94.113.1
      kernel-syms-4.4.180-94.113.1

   - SUSE Linux Enterprise High Availability 12-SP3 (ppc64le s390x x86_64):

      cluster-md-kmp-default-4.4.180-94.113.1
      cluster-md-kmp-default-debuginfo-4.4.180-94.113.1
      dlm-kmp-default-4.4.180-94.113.1
      dlm-kmp-default-debuginfo-4.4.180-94.113.1
      gfs2-kmp-default-4.4.180-94.113.1
      gfs2-kmp-default-debuginfo-4.4.180-94.113.1
      kernel-default-debuginfo-4.4.180-94.113.1
      kernel-default-debugsource-4.4.180-94.113.1
      ocfs2-kmp-default-4.4.180-94.113.1
      ocfs2-kmp-default-debuginfo-4.4.180-94.113.1

   - SUSE Enterprise Storage 5 (aarch64 x86_64):

      kernel-default-4.4.180-94.113.1
      kernel-default-base-4.4.180-94.113.1
      kernel-default-base-debuginfo-4.4.180-94.113.1
      kernel-default-debuginfo-4.4.180-94.113.1
      kernel-default-debugsource-4.4.180-94.113.1
      kernel-default-devel-4.4.180-94.113.1
      kernel-syms-4.4.180-94.113.1

   - SUSE Enterprise Storage 5 (noarch):

      kernel-devel-4.4.180-94.113.1
      kernel-macros-4.4.180-94.113.1
      kernel-source-4.4.180-94.113.1

   - SUSE Enterprise Storage 5 (x86_64):

      kernel-default-kgraft-4.4.180-94.113.1
      kgraft-patch-4_4_180-94_113-default-1-4.5.1
      kgraft-patch-4_4_180-94_113-default-debuginfo-1-4.5.1

   - SUSE CaaS Platform 3.0 (x86_64):

      kernel-default-4.4.180-94.113.1
      kernel-default-debuginfo-4.4.180-94.113.1
      kernel-default-debugsource-4.4.180-94.113.1

   - HPE Helion Openstack 8 (noarch):

      kernel-devel-4.4.180-94.113.1
      kernel-macros-4.4.180-94.113.1
      kernel-source-4.4.180-94.113.1

   - HPE Helion Openstack 8 (x86_64):

      kernel-default-4.4.180-94.113.1
      kernel-default-base-4.4.180-94.113.1
      kernel-default-base-debuginfo-4.4.180-94.113.1
      kernel-default-debuginfo-4.4.180-94.113.1
      kernel-default-debugsource-4.4.180-94.113.1
      kernel-default-devel-4.4.180-94.113.1
      kernel-default-kgraft-4.4.180-94.113.1
      kernel-syms-4.4.180-94.113.1
      kgraft-patch-4_4_180-94_113-default-1-4.5.1
      kgraft-patch-4_4_180-94_113-default-debuginfo-1-4.5.1


References:

   https://www.suse.com/security/cve/CVE-2019-14895.html
   https://www.suse.com/security/cve/CVE-2019-15213.html
   https://www.suse.com/security/cve/CVE-2019-16231.html
   https://www.suse.com/security/cve/CVE-2019-18660.html
   https://www.suse.com/security/cve/CVE-2019-18680.html
   https://www.suse.com/security/cve/CVE-2019-18683.html
   https://www.suse.com/security/cve/CVE-2019-18805.html
   https://www.suse.com/security/cve/CVE-2019-19052.html
   https://www.suse.com/security/cve/CVE-2019-19062.html
   https://www.suse.com/security/cve/CVE-2019-19065.html
   https://www.suse.com/security/cve/CVE-2019-19073.html
   https://www.suse.com/security/cve/CVE-2019-19074.html
   https://www.suse.com/security/cve/CVE-2019-19332.html
   https://www.suse.com/security/cve/CVE-2019-19338.html
   https://www.suse.com/security/cve/CVE-2019-19523.html
   https://www.suse.com/security/cve/CVE-2019-19524.html
   https://www.suse.com/security/cve/CVE-2019-19525.html
   https://www.suse.com/security/cve/CVE-2019-19527.html
   https://www.suse.com/security/cve/CVE-2019-19530.html
   https://www.suse.com/security/cve/CVE-2019-19531.html
   https://www.suse.com/security/cve/CVE-2019-19532.html
   https://www.suse.com/security/cve/CVE-2019-19533.html
   https://www.suse.com/security/cve/CVE-2019-19534.html
   https://www.suse.com/security/cve/CVE-2019-19535.html
   https://www.suse.com/security/cve/CVE-2019-19536.html
   https://www.suse.com/security/cve/CVE-2019-19537.html
   https://bugzilla.suse.com/1091041
   https://bugzilla.suse.com/1119461
   https://bugzilla.suse.com/1119465
   https://bugzilla.suse.com/1131107
   https://bugzilla.suse.com/1138190
   https://bugzilla.suse.com/1146544
   https://bugzilla.suse.com/1146612
   https://bugzilla.suse.com/1150466
   https://bugzilla.suse.com/1150483
   https://bugzilla.suse.com/1152631
   https://bugzilla.suse.com/1153811
   https://bugzilla.suse.com/1154905
   https://bugzilla.suse.com/1155689
   https://bugzilla.suse.com/1155897
   https://bugzilla.suse.com/1155898
   https://bugzilla.suse.com/1156187
   https://bugzilla.suse.com/1157038
   https://bugzilla.suse.com/1157042
   https://bugzilla.suse.com/1157070
   https://bugzilla.suse.com/1157143
   https://bugzilla.suse.com/1157158
   https://bugzilla.suse.com/1157191
   https://bugzilla.suse.com/1157324
   https://bugzilla.suse.com/1157333
   https://bugzilla.suse.com/1157464
   https://bugzilla.suse.com/1158132
   https://bugzilla.suse.com/1158394
   https://bugzilla.suse.com/1158398
   https://bugzilla.suse.com/1158410
   https://bugzilla.suse.com/1158413
   https://bugzilla.suse.com/1158417
   https://bugzilla.suse.com/1158445
   https://bugzilla.suse.com/1158823
   https://bugzilla.suse.com/1158824
   https://bugzilla.suse.com/1158827
   https://bugzilla.suse.com/1158834
   https://bugzilla.suse.com/1158900
   https://bugzilla.suse.com/1158903
   https://bugzilla.suse.com/1158904
   https://bugzilla.suse.com/1158954

_______________________________________________
sle-security-updates mailing list
sle-security-updates@lists.suse.com
http://lists.suse.com/mailman/listinfo/sle-security-updates