Security update for the Linux Kernel

Announcement ID:	SUSE-SU-2019:14127-1
Rating:	important
References:	bsc#1063416 bsc#1090078 bsc#1102340 bsc#1120758 bsc#1134395 bsc#1134835 bsc#1135650 bsc#1136424 bsc#1137194 bsc#1138943 bsc#1139751
Cross-References:	CVE-2018-20836 CVE-2018-5390 CVE-2019-12614 CVE-2019-3459 CVE-2019-3460 CVE-2019-3846 CVE-2019-3896
CVSS scores:	CVE-2018-20836 ( SUSE ): 6.2 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H CVE-2018-20836 ( NVD ): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2018-20836 ( NVD ): 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2018-5390 ( SUSE ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2018-5390 ( NVD ): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2018-5390 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2019-12614 ( SUSE ): 6.2 CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2019-12614 ( NVD ): 7.5 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2019-3459 ( SUSE ): 2.6 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2019-3459 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-3459 ( NVD ): 6.5 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-3460 ( SUSE ): 2.6 CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L CVE-2019-3460 ( NVD ): 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-3460 ( NVD ): 6.5 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2019-3846 ( SUSE ): 7.5 CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-3846 ( NVD ): 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2019-3846 ( NVD ): 8.0 CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2019-3896 ( SUSE ): 7.0 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2019-3896 ( NVD ): 7.0 CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products:	SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4

An update that solves seven vulnerabilities and has four security fixes can now be installed.

Description:

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2019-3459: A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel(bnc#1120758).
• CVE-2019-3460: A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before (bnc#1120758).
• CVE-2019-3896: A double-free could happen in idr_remove_all() in lib/idr.c in the Linux kernel. An unprivileged local attacker could use this flaw for a privilege escalation or for a system crash and a denial of service (DoS) (bnc#1138943).
• CVE-2018-5390: The Linux kernel could be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which could lead to a denial of service (bnc#1102340).
• CVE-2018-20836: An issue was discovered in the Linux kernel There was a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free (bnc#1134395).
• CVE-2019-12614: An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel There was an unchecked kstrdup of prop-name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash) (bnc#1137194).
• CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network (bnc#1136424 1136446).

The following non-security bugs were fixed:

• KEYS: do not let add_key() update an uninstantiated key (bnc#1063416).
• fnic: Fix to cleanup aborted IO to avoid device being offlined by mid-layer (bsc#1134835).
• signal: give SEND_SIG_FORCED more power to beat SIGNAL_UNKILLABLE (bsc#1135650).
• signal: oom_kill_task: use SEND_SIG_FORCED instead of force_sig() (bsc#1135650).
• tcp: a regression in the previous fix for the TCP SACK issue was fixed (bnc#1139751)

Special Instructions and Notes:

• Please reboot the system after installing this update.

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4
  zypper in -t patch slessp4-kernel-source-14127=1
• SUSE Linux Enterprise Server 11 SP4
  zypper in -t patch slessp4-kernel-source-14127=1

Package List:

• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4 (s390x x86_64 i586 ppc64 nosrc)
  • kernel-trace-3.0.101-108.98.1
  • kernel-default-3.0.101-108.98.1
• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4 (ppc64 s390x x86_64 i586)
  • kernel-default-devel-3.0.101-108.98.1
  • kernel-syms-3.0.101-108.98.1
  • kernel-trace-base-3.0.101-108.98.1
  • kernel-source-3.0.101-108.98.1
  • kernel-default-base-3.0.101-108.98.1
  • kernel-trace-devel-3.0.101-108.98.1
• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4 (nosrc x86_64 i586)
  • kernel-xen-3.0.101-108.98.1
  • kernel-ec2-3.0.101-108.98.1
• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4 (x86_64 i586)
  • kernel-xen-base-3.0.101-108.98.1
  • kernel-ec2-devel-3.0.101-108.98.1
  • kernel-ec2-base-3.0.101-108.98.1
  • kernel-xen-devel-3.0.101-108.98.1
• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4 (nosrc i586)
  • kernel-pae-3.0.101-108.98.1
• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4 (i586)
  • kernel-pae-base-3.0.101-108.98.1
  • kernel-pae-devel-3.0.101-108.98.1
• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4 (ppc64 nosrc)
  • kernel-bigmem-3.0.101-108.98.1
  • kernel-ppc64-3.0.101-108.98.1
• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4 (ppc64)
  • kernel-ppc64-devel-3.0.101-108.98.1
  • kernel-bigmem-devel-3.0.101-108.98.1
  • kernel-bigmem-base-3.0.101-108.98.1
  • kernel-ppc64-base-3.0.101-108.98.1
• SUSE Linux Enterprise Server 11 SP4 LTSS 11-SP4 (s390x)
  • kernel-default-man-3.0.101-108.98.1
• SUSE Linux Enterprise Server 11 SP4 (s390x x86_64 i586 ppc64 nosrc)
  • kernel-trace-3.0.101-108.98.1
  • kernel-default-3.0.101-108.98.1
• SUSE Linux Enterprise Server 11 SP4 (ppc64 s390x x86_64 i586)
  • kernel-default-devel-3.0.101-108.98.1
  • kernel-syms-3.0.101-108.98.1
  • kernel-trace-base-3.0.101-108.98.1
  • kernel-source-3.0.101-108.98.1
  • kernel-default-base-3.0.101-108.98.1
  • kernel-trace-devel-3.0.101-108.98.1
• SUSE Linux Enterprise Server 11 SP4 (nosrc x86_64 i586)
  • kernel-xen-3.0.101-108.98.1
  • kernel-ec2-3.0.101-108.98.1
• SUSE Linux Enterprise Server 11 SP4 (x86_64 i586)
  • kernel-xen-base-3.0.101-108.98.1
  • kernel-ec2-devel-3.0.101-108.98.1
  • kernel-ec2-base-3.0.101-108.98.1
  • kernel-xen-devel-3.0.101-108.98.1
• SUSE Linux Enterprise Server 11 SP4 (nosrc i586)
  • kernel-pae-3.0.101-108.98.1
• SUSE Linux Enterprise Server 11 SP4 (i586)
  • kernel-pae-base-3.0.101-108.98.1
  • kernel-pae-devel-3.0.101-108.98.1
• SUSE Linux Enterprise Server 11 SP4 (ppc64 nosrc)
  • kernel-bigmem-3.0.101-108.98.1
  • kernel-ppc64-3.0.101-108.98.1
• SUSE Linux Enterprise Server 11 SP4 (ppc64)
  • kernel-ppc64-devel-3.0.101-108.98.1
  • kernel-bigmem-devel-3.0.101-108.98.1
  • kernel-bigmem-base-3.0.101-108.98.1
  • kernel-ppc64-base-3.0.101-108.98.1
• SUSE Linux Enterprise Server 11 SP4 (s390x)
  • kernel-default-man-3.0.101-108.98.1

References:

• https://www.suse.com/security/cve/CVE-2018-20836.html
• https://www.suse.com/security/cve/CVE-2018-5390.html
• https://www.suse.com/security/cve/CVE-2019-12614.html
• https://www.suse.com/security/cve/CVE-2019-3459.html
• https://www.suse.com/security/cve/CVE-2019-3460.html
• https://www.suse.com/security/cve/CVE-2019-3846.html
• https://www.suse.com/security/cve/CVE-2019-3896.html
• https://bugzilla.suse.com/show_bug.cgi?id=1063416
• https://bugzilla.suse.com/show_bug.cgi?id=1090078
• https://bugzilla.suse.com/show_bug.cgi?id=1102340
• https://bugzilla.suse.com/show_bug.cgi?id=1120758
• https://bugzilla.suse.com/show_bug.cgi?id=1134395
• https://bugzilla.suse.com/show_bug.cgi?id=1134835
• https://bugzilla.suse.com/show_bug.cgi?id=1135650
• https://bugzilla.suse.com/show_bug.cgi?id=1136424
• https://bugzilla.suse.com/show_bug.cgi?id=1137194
• https://bugzilla.suse.com/show_bug.cgi?id=1138943
• https://bugzilla.suse.com/show_bug.cgi?id=1139751