CVE-2017-1000405

Upstream information

CVE-2017-1000405 at MITRE

Description

The Linux Kernel versions 2.6.38 through 4.14 have a problematic use of pmd_mkdirty() in the touch_pmd() function inside the THP implementation. touch_pmd() can be reached by get_user_pages(). In such case, the pmd will become dirty. This scenario breaks the new can_follow_write_pmd()'s logic - pmd can become dirty without going through a COW cycle. This bug is not as severe as the original "Dirty cow" because an ext4 file (or any other regular file) cannot be mapped using THP. Nevertheless, it does allow us to overwrite read-only huge pages. For example, the zero huge page and sealed shmem files can be overwritten (since their mapping can be populated using THP). Note that after the first write page-fault to the zero page, it will be replaced with a new fresh (and zeroed) thp.

---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

CVSS v2 Scores

	National Vulnerability Database	SUSE
Base Score	6.9	3.6
Vector	AV:L/AC:M/Au:N/C:C/I:C/A:C	AV:L/AC:L/Au:N/C:N/I:P/A:P
Access Vector	Local	Local
Access Complexity	Medium	Low
Authentication	None	None
Confidentiality Impact	Complete	None
Integrity Impact	Complete	Partial
Availability Impact	Complete	Partial

CVSS v3 Scores

	National Vulnerability Database	SUSE
Base Score	7	5.7
Vector	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H	CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:L
Attack Vector	Local	Local
Attack Complexity	High	Low
Privileges Required	Low	None
User Interaction	None	None
Scope	Unchanged	Changed
Confidentiality Impact	High	None
Integrity Impact	High	Low
Availability Impact	High	Low
CVSSv3 Version	3.1	3

Note from the SUSE Security Team

This issue affects our SUSE Linux Enterprise 12 kernels. SUSE Linux Enterprise 11 and older systems are not affected.

Note from the SUSE Security Team on the kernel-default package

SUSE will no longer fix all CVEs in the Linux Kernel anymore, but declare some bug classes as won't fix. Please refer to TID 21496 for more details.

SUSE Bugzilla entries: 1069496 [RESOLVED / FIXED], 1070307 [RESOLVED / FIXED]

SUSE Security Advisories:

• SUSE-SU-2017:3210-1, published Mon Dec 4 07:07:05 MST 2017
• SUSE-SU-2017:3225-1, published Wed Dec 6 13:08:44 MST 2017
• SUSE-SU-2017:3226-1, published Wed Dec 6 13:09:38 MST 2017
• SUSE-SU-2017:3249-1, published Fri Dec 8 10:11:42 MST 2017
• SUSE-SU-2017:3284-1, published Thu Dec 14 07:08:27 MST 2017
• SUSE-SU-2017:3285-1, published Thu Dec 14 07:09:20 MST 2017
• SUSE-SU-2017:3286-1, published Thu Dec 14 07:10:05 MST 2017
• SUSE-SU-2017:3295-1, published Thu Dec 14 07:16:45 MST 2017
• SUSE-SU-2017:3296-1, published Thu Dec 14 07:17:39 MST 2017
• SUSE-SU-2017:3297-1, published Thu Dec 14 07:18:39 MST 2017
• SUSE-SU-2017:3300-1, published Thu Dec 14 07:20:54 MST 2017
• SUSE-SU-2017:3310-1, published Thu Dec 14 07:26:47 MST 2017
• SUSE-SU-2017:3314-1, published Thu Dec 14 13:10:51 MST 2017
• SUSE-SU-2017:3317-1, published Thu Dec 14 13:12:53 MST 2017
• SUSE-SU-2017:3319-1, published Thu Dec 14 13:13:56 MST 2017
• SUSE-SU-2017:3324-1, published Thu Dec 14 13:16:53 MST 2017
• SUSE-SU-2018:0213-1, published Thu Jan 25 07:08:06 MST 2018
• SUSE-SU-2020:3400-1, published Thu Nov 19 07:32:09 MST 2020
• SUSE-SU-2020:3449-1, published Thu Nov 19 13:14:46 MST 2020
• openSUSE-SU-2017:3358-1, published Fri Dec 8 15:48:38 2023
• openSUSE-SU-2017:3359-1, published Fri Dec 8 15:48:38 2023

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Linux Enterprise Desktop 12 SP2	kernel-default >= 4.4.90-92.50.1 kernel-default-devel >= 4.4.90-92.50.1 kernel-default-extra >= 4.4.90-92.50.1 kernel-devel >= 4.4.90-92.50.1 kernel-docs >= 4.4.90-92.50.3 kernel-macros >= 4.4.90-92.50.1 kernel-obs-build >= 4.4.90-92.50.1 kernel-source >= 4.4.90-92.50.1 kernel-syms >= 4.4.90-92.50.1	Patchnames: SUSE-SLE-DESKTOP-12-SP2-2017-2007 SUSE-SLE-SDK-12-SP2-2017-2007 SUSE-SLE-WE-12-SP2-2017-2007
SUSE Linux Enterprise Desktop 12 SP3	kernel-default >= 4.4.92-6.30.1 kernel-default-devel >= 4.4.92-6.30.1 kernel-default-extra >= 4.4.92-6.30.1 kernel-devel >= 4.4.92-6.30.1 kernel-docs >= 4.4.92-6.30.2 kernel-macros >= 4.4.92-6.30.1 kernel-obs-build >= 4.4.92-6.30.1 kernel-source >= 4.4.92-6.30.1 kernel-syms >= 4.4.92-6.30.1	Patchnames: SUSE-SLE-DESKTOP-12-SP3-2017-2006 SUSE-SLE-SDK-12-SP3-2017-2006 SUSE-SLE-WE-12-SP3-2017-2006
SUSE Linux Enterprise High Availability Extension 12 SP2	cluster-md-kmp-default >= 4.4.90-92.50.1 cluster-network-kmp-default >= 4.4.90-92.50.1 dlm-kmp-default >= 4.4.90-92.50.1 gfs2-kmp-default >= 4.4.90-92.50.1 ocfs2-kmp-default >= 4.4.90-92.50.1	Patchnames: SUSE-SLE-HA-12-SP2-2017-2007
SUSE Linux Enterprise High Availability Extension 12 SP3	cluster-md-kmp-default >= 4.4.92-6.30.1 dlm-kmp-default >= 4.4.92-6.30.1 gfs2-kmp-default >= 4.4.92-6.30.1 ocfs2-kmp-default >= 4.4.92-6.30.1	Patchnames: SUSE-SLE-HA-12-SP3-2017-2006
SUSE Linux Enterprise High Performance Computing 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5	kernel-ec2 >= 3.12.74-60.64.66.1 kernel-ec2-devel >= 3.12.74-60.64.66.1 kernel-ec2-extra >= 3.12.74-60.64.66.1	Patchnames: SUSE-SLE-Module-Public-Cloud-12-2017-1995 SUSE-SLE-Module-Public-Cloud-12-2017-2024
SUSE Linux Enterprise Live Patching 12 SP3	kgraft-patch-4_4_82-6_3-default >= 4-2.1 kgraft-patch-4_4_82-6_6-default >= 3-2.1 kgraft-patch-4_4_82-6_9-default >= 3-2.1 kgraft-patch-4_4_92-6_18-default >= 2-2.1	Patchnames: SUSE-SLE-Live-Patching-12-SP3-2017-2006 SUSE-SLE-Live-Patching-12-SP3-2017-2073 SUSE-SLE-Live-Patching-12-SP3-2017-2074 SUSE-SLE-Live-Patching-12-SP3-2017-2075 SUSE-SLE-Live-Patching-12-SP3-2017-2076
SUSE Linux Enterprise Live Patching 12 SP4	kgraft-patch-4_12_14-95_40-default >= 8-2.2	Patchnames: SUSE-SLE-Live-Patching-12-SP4-2020-3449
SUSE Linux Enterprise Live Patching 12 SP5	kgraft-patch-4_12_14-120-default >= 8-21.2 kgraft-patch-4_12_14-122_7-default >= 8-2.2	Patchnames: SUSE-SLE-Live-Patching-12-SP5-2020-3400 SUSE-SLE-Live-Patching-12-SP5-2020-3401
SUSE Linux Enterprise Live Patching 12	kgraft-patch-4_4_59-92_17-default >= 7-2.1 kgraft-patch-4_4_59-92_20-default >= 7-2.1 kgraft-patch-4_4_59-92_24-default >= 6-2.1 kgraft-patch-4_4_74-92_29-default >= 6-2.1 kgraft-patch-4_4_74-92_32-default >= 5-2.1 kgraft-patch-4_4_74-92_35-default >= 5-2.1 kgraft-patch-4_4_74-92_38-default >= 4-2.1 kgraft-patch-4_4_90-92_45-default >= 2-2.1	Patchnames: SUSE-SLE-Live-Patching-12-2017-2007 SUSE-SLE-Live-Patching-12-2017-2046 SUSE-SLE-Live-Patching-12-2017-2047 SUSE-SLE-Live-Patching-12-2017-2051 SUSE-SLE-Live-Patching-12-2017-2053 SUSE-SLE-Live-Patching-12-2017-2054 SUSE-SLE-Live-Patching-12-2017-2055 SUSE-SLE-Live-Patching-12-2017-2056 SUSE-SLE-Live-Patching-12-2017-2069
SUSE Linux Enterprise Live Patching 15 SP1	kernel-livepatch-4_12_14-197_26-default >= 8-2.2	Patchnames: SUSE-SLE-Module-Live-Patching-15-SP1-2020-3411
SUSE Linux Enterprise Live Patching 15	kernel-livepatch-4_12_14-150_41-default >= 8-2.2	Patchnames: SUSE-SLE-Module-Live-Patching-15-2020-3440
SUSE Linux Enterprise Real Time 12 SP2	cluster-md-kmp-rt >= 4.4.104-24.1 cluster-network-kmp-rt >= 4.4.104-24.1 dlm-kmp-rt >= 4.4.104-24.1 gfs2-kmp-rt >= 4.4.104-24.1 kernel-devel-rt >= 4.4.104-24.1 kernel-rt >= 4.4.104-24.1 kernel-rt-base >= 4.4.104-24.1 kernel-rt-devel >= 4.4.104-24.1 kernel-rt_debug-devel >= 4.4.104-24.1 kernel-source-rt >= 4.4.104-24.1 kernel-syms-rt >= 4.4.104-24.1 ocfs2-kmp-rt >= 4.4.104-24.1	Patchnames: SUSE-SLE-RT-12-SP2-2018-145
SUSE Linux Enterprise Server 12 SP1-LTSS	kernel-default >= 3.12.74-60.64.66.1 kernel-default-base >= 3.12.74-60.64.66.1 kernel-default-devel >= 3.12.74-60.64.66.1 kernel-default-man >= 3.12.74-60.64.66.1 kernel-devel >= 3.12.74-60.64.66.1 kernel-macros >= 3.12.74-60.64.66.1 kernel-source >= 3.12.74-60.64.66.1 kernel-syms >= 3.12.74-60.64.66.1 kernel-xen >= 3.12.74-60.64.66.1 kernel-xen-base >= 3.12.74-60.64.66.1 kernel-xen-devel >= 3.12.74-60.64.66.1 kgraft-patch-3_12_74-60_64_66-default >= 1-2.1 kgraft-patch-3_12_74-60_64_66-xen >= 1-2.1	Patchnames: SUSE-SLE-SERVER-12-SP1-2017-1995
SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2	kernel-default >= 4.4.90-92.50.1 kernel-default-base >= 4.4.90-92.50.1 kernel-default-devel >= 4.4.90-92.50.1 kernel-default-extra >= 4.4.90-92.50.1 kernel-default-man >= 4.4.90-92.50.1 kernel-devel >= 4.4.90-92.50.1 kernel-docs >= 4.4.90-92.50.3 kernel-macros >= 4.4.90-92.50.1 kernel-obs-build >= 4.4.90-92.50.1 kernel-source >= 4.4.90-92.50.1 kernel-syms >= 4.4.90-92.50.1	Patchnames: SUSE-SLE-SDK-12-SP2-2017-2007 SUSE-SLE-SERVER-12-SP2-2017-2007 SUSE-SLE-WE-12-SP2-2017-2007
SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3	kernel-default >= 4.4.92-6.30.1 kernel-default-base >= 4.4.92-6.30.1 kernel-default-devel >= 4.4.92-6.30.1 kernel-default-extra >= 4.4.92-6.30.1 kernel-default-man >= 4.4.92-6.30.1 kernel-devel >= 4.4.92-6.30.1 kernel-docs >= 4.4.92-6.30.2 kernel-ec2 >= 3.12.74-60.64.66.1 kernel-ec2-devel >= 3.12.74-60.64.66.1 kernel-ec2-extra >= 3.12.74-60.64.66.1 kernel-macros >= 4.4.92-6.30.1 kernel-obs-build >= 4.4.92-6.30.1 kernel-source >= 4.4.92-6.30.1 kernel-syms >= 4.4.92-6.30.1	Patchnames: SUSE-SLE-Module-Public-Cloud-12-2017-1995 SUSE-SLE-Module-Public-Cloud-12-2017-2024 SUSE-SLE-SDK-12-SP3-2017-2006 SUSE-SLE-SERVER-12-SP3-2017-2006 SUSE-SLE-WE-12-SP3-2017-2006
SUSE Linux Enterprise Server 12-LTSS	kernel-default >= 3.12.61-52.106.1 kernel-default-base >= 3.12.61-52.106.1 kernel-default-devel >= 3.12.61-52.106.1 kernel-default-man >= 3.12.61-52.106.1 kernel-devel >= 3.12.61-52.106.1 kernel-macros >= 3.12.61-52.106.1 kernel-source >= 3.12.61-52.106.1 kernel-syms >= 3.12.61-52.106.1 kernel-xen >= 3.12.61-52.106.1 kernel-xen-base >= 3.12.61-52.106.1 kernel-xen-devel >= 3.12.61-52.106.1 kgraft-patch-3_12_61-52_106-default >= 1-5.1 kgraft-patch-3_12_61-52_106-xen >= 1-5.1	Patchnames: SUSE-SLE-SERVER-12-2017-2024
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2	kernel-default >= 4.4.90-92.50.1 kernel-default-base >= 4.4.90-92.50.1 kernel-default-devel >= 4.4.90-92.50.1 kernel-devel >= 4.4.90-92.50.1 kernel-macros >= 4.4.90-92.50.1 kernel-source >= 4.4.90-92.50.1 kernel-syms >= 4.4.90-92.50.1	Patchnames: SUSE-SLE-RPI-12-SP2-2017-2007
SUSE Linux Enterprise Server for SAP Applications 12 SP1	kernel-default >= 3.12.74-60.64.66.1 kernel-default-base >= 3.12.74-60.64.66.1 kernel-default-devel >= 3.12.74-60.64.66.1 kernel-devel >= 3.12.74-60.64.66.1 kernel-macros >= 3.12.74-60.64.66.1 kernel-source >= 3.12.74-60.64.66.1 kernel-syms >= 3.12.74-60.64.66.1 kernel-xen >= 3.12.74-60.64.66.1 kernel-xen-base >= 3.12.74-60.64.66.1 kernel-xen-devel >= 3.12.74-60.64.66.1 kgraft-patch-3_12_74-60_64_66-default >= 1-2.1 kgraft-patch-3_12_74-60_64_66-xen >= 1-2.1	Patchnames: SUSE-SLE-SAP-12-SP1-2017-1995
SUSE Linux Enterprise Software Development Kit 12 SP2	kernel-docs >= 4.4.90-92.50.3 kernel-obs-build >= 4.4.90-92.50.1	Patchnames: SUSE-SLE-SDK-12-SP2-2017-2007
SUSE Linux Enterprise Software Development Kit 12 SP3	kernel-docs >= 4.4.92-6.30.2 kernel-obs-build >= 4.4.92-6.30.1	Patchnames: SUSE-SLE-SDK-12-SP3-2017-2006
SUSE Linux Enterprise Workstation Extension 12 SP2	kernel-default-extra >= 4.4.90-92.50.1	Patchnames: SUSE-SLE-WE-12-SP2-2017-2007
SUSE Linux Enterprise Workstation Extension 12 SP3	kernel-default-extra >= 4.4.92-6.30.1	Patchnames: SUSE-SLE-WE-12-SP3-2017-2006
SUSE OpenStack Cloud 6	kernel-default >= 3.12.74-60.64.66.1 kernel-default-base >= 3.12.74-60.64.66.1 kernel-default-devel >= 3.12.74-60.64.66.1 kernel-devel >= 3.12.74-60.64.66.1 kernel-macros >= 3.12.74-60.64.66.1 kernel-source >= 3.12.74-60.64.66.1 kernel-syms >= 3.12.74-60.64.66.1 kernel-xen >= 3.12.74-60.64.66.1 kernel-xen-base >= 3.12.74-60.64.66.1 kernel-xen-devel >= 3.12.74-60.64.66.1 kgraft-patch-3_12_74-60_64_66-default >= 1-2.1 kgraft-patch-3_12_74-60_64_66-xen >= 1-2.1	Patchnames: SUSE-OpenStack-Cloud-6-2017-1995

---

Status of this issue by product and package

Please note that this evaluation state might be work in progress, incomplete or outdated. Also information for service packs in the LTSS phase is only included for issues meeting the LTSS criteria. If in doubt, feel free to contact us for clarification. The updates are grouped by state of their lifecycle. SUSE product lifecycles are documented on the lifecycle page.

Product(s)	Source package	State
Products under general support and receiving all security fixes.
SUSE Linux Enterprise High Performance Computing 12	kernel-ec2	Released
SUSE Linux Enterprise Micro 5.1	kernel-default	Ignore
SUSE Linux Enterprise Micro 5.1	kernel-rt	Ignore
SUSE Linux Enterprise Micro 5.1	kernel-source-rt	Ignore
SUSE Linux Enterprise Micro 5.2	kernel-default	Ignore
SUSE Linux Enterprise Micro 5.2	kernel-rt	Ignore
SUSE Linux Enterprise Micro 5.2	kernel-source-rt	Ignore
SUSE Linux Enterprise Micro 5.3	kernel-rt	Released
SUSE Linux Enterprise Micro 5.3	kernel-source-rt	Affected
SUSE Linux Enterprise Micro 5.4	kernel-rt	Released
SUSE Linux Enterprise Micro 5.4	kernel-source-rt	Affected
Products under Long Term Service Pack support and receiving important and critical security fixes.
SUSE Linux Enterprise High Performance Computing 15 SP3	kernel-source	Ignore
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	kernel-default	Ignore
SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS	kernel-source	Ignore
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	kernel-default	Ignore
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS	kernel-source	Ignore
SUSE Linux Enterprise Live Patching 12 SP5	kgraft-patch-SLE12-SP5_Update_0	Released
SUSE Linux Enterprise Live Patching 12 SP5	kgraft-patch-SLE12-SP5_Update_1	Released
SUSE Linux Enterprise Module for Basesystem 15 SP3	kernel-source	Ignore
SUSE Linux Enterprise Module for Development Tools 15 SP3	kernel-source	Ignore
SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE	kernel-source	Not affected
SUSE Linux Enterprise Server 12 SP5	kernel-ec2	Released
SUSE Linux Enterprise Server 15 SP3	kernel-source	Ignore
SUSE Linux Enterprise Server 15 SP3-LTSS	kernel-source	Ignore
SUSE Linux Enterprise Server Business Critical Linux 15 SP3	kernel-default	Ignore
SUSE Linux Enterprise Server Business Critical Linux 15 SP3	kernel-source	Ignore
SUSE Linux Enterprise Server for SAP Applications 12 SP5	kernel-ec2	Released
SUSE Linux Enterprise Server for SAP Applications 15 SP3	kernel-default	Ignore
SUSE Linux Enterprise Server for SAP Applications 15 SP3	kernel-source	Ignore
Products past their end of life and not receiving proactive updates anymore.
HPE Helion OpenStack 8	kernel-default	Affected
HPE Helion OpenStack 8	kernel-source	Affected
HPE Helion OpenStack 8	kernel-source-azure	Affected
SUSE CaaS Platform Toolchain 3	kernel-source	Affected
SUSE Enterprise Storage 7.1	kernel-default	Ignore
SUSE Enterprise Storage 7.1	kernel-source	Ignore
SUSE Linux Enterprise Desktop 11 SP3	kernel-source	Not affected
SUSE Linux Enterprise Desktop 11 SP4	kernel-source	Not affected
SUSE Linux Enterprise Desktop 12	kernel-source	Affected
SUSE Linux Enterprise Desktop 12 SP1	kernel-source	Affected
SUSE Linux Enterprise Desktop 12 SP2	kernel-default	Released
SUSE Linux Enterprise Desktop 12 SP2	kernel-docs	Released
SUSE Linux Enterprise Desktop 12 SP2	kernel-obs-build	Released
SUSE Linux Enterprise Desktop 12 SP2	kernel-source	Released
SUSE Linux Enterprise Desktop 12 SP2	kernel-syms	Released
SUSE Linux Enterprise Desktop 12 SP3	kernel-default	Released
SUSE Linux Enterprise Desktop 12 SP3	kernel-docs	Released
SUSE Linux Enterprise Desktop 12 SP3	kernel-obs-build	Released
SUSE Linux Enterprise Desktop 12 SP3	kernel-source	Released
SUSE Linux Enterprise Desktop 12 SP3	kernel-syms	Released
SUSE Linux Enterprise Desktop 15 SP3	kernel-source	Ignore
SUSE Linux Enterprise High Availability Extension 12 SP2	kernel-default	Released
SUSE Linux Enterprise High Availability Extension 12 SP3	kernel-default	Released
SUSE Linux Enterprise Live Patching 12	kgraft-patch-SLE12-SP2_Update_10	Released
SUSE Linux Enterprise Live Patching 12	kgraft-patch-SLE12-SP2_Update_11	Released
SUSE Linux Enterprise Live Patching 12	kgraft-patch-SLE12-SP2_Update_12	Released
SUSE Linux Enterprise Live Patching 12	kgraft-patch-SLE12-SP2_Update_13	Released
SUSE Linux Enterprise Live Patching 12	kgraft-patch-SLE12-SP2_Update_14	Released
SUSE Linux Enterprise Live Patching 12	kgraft-patch-SLE12-SP2_Update_15	Released
SUSE Linux Enterprise Live Patching 12	kgraft-patch-SLE12-SP2_Update_7	Released
SUSE Linux Enterprise Live Patching 12	kgraft-patch-SLE12-SP2_Update_8	Released
SUSE Linux Enterprise Live Patching 12	kgraft-patch-SLE12-SP2_Update_9	Released
SUSE Linux Enterprise Live Patching 12 SP3	kgraft-patch-SLE12-SP3_Update_1	Released
SUSE Linux Enterprise Live Patching 12 SP3	kgraft-patch-SLE12-SP3_Update_2	Released
SUSE Linux Enterprise Live Patching 12 SP3	kgraft-patch-SLE12-SP3_Update_3	Released
SUSE Linux Enterprise Live Patching 12 SP3	kgraft-patch-SLE12-SP3_Update_4	Released
SUSE Linux Enterprise Live Patching 12 SP3	kgraft-patch-SLE12-SP3_Update_5	Released
SUSE Linux Enterprise Live Patching 12 SP4	kgraft-patch-SLE12-SP4_Update_10	Released
SUSE Linux Enterprise Live Patching 15	kernel-livepatch-SLE15_Update_16	Released
SUSE Linux Enterprise Live Patching 15 SP1	kernel-livepatch-SLE15-SP1_Update_7	Released
SUSE Linux Enterprise Module for Public Cloud 12	kernel-ec2	Released
SUSE Linux Enterprise Point of Sale 11 SP3	kernel-source	Not affected
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT	kernel-source	Affected
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT	kgraft-patch-SLE12-SP2_Update_10	Affected
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT	kgraft-patch-SLE12-SP2_Update_11	Affected
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT	kgraft-patch-SLE12-SP2_Update_12	Affected
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT	kgraft-patch-SLE12-SP2_Update_13	Affected
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT	kgraft-patch-SLE12-SP2_Update_14	Affected
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT	kgraft-patch-SLE12-SP2_Update_7	Affected
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT	kgraft-patch-SLE12-SP2_Update_8	Affected
SUSE Linux Enterprise Point of Sale 12 SP2-CLIENT	kgraft-patch-SLE12-SP2_Update_9	Affected
SUSE Linux Enterprise Real Time 12 SP2	kernel-rt	Released
SUSE Linux Enterprise Real Time 12 SP2	kernel-rt_debug	Released
SUSE Linux Enterprise Real Time 12 SP2	kernel-source-rt	Released
SUSE Linux Enterprise Real Time 12 SP2	kernel-syms-rt	Released
SUSE Linux Enterprise Real Time 15 SP3	kernel-default	Ignore
SUSE Linux Enterprise Real Time 15 SP3	kernel-source	Ignore
SUSE Linux Enterprise Real Time 15 SP3	kernel-source-rt	Ignore
SUSE Linux Enterprise Real Time 15 SP4	kernel-source-rt	Released
SUSE Linux Enterprise Server 11 SP3	kernel-source	Not affected
SUSE Linux Enterprise Server 11 SP3 LTSS	kernel-default	Not affected
SUSE Linux Enterprise Server 11 SP3 LTSS	kernel-source	Not affected
SUSE Linux Enterprise Server 11 SP3-LTSS	kernel-source	Not affected
SUSE Linux Enterprise Server 11 SP4	kernel-source	Not affected
SUSE Linux Enterprise Server 11 SP4-LTSS	kernel-default	Not affected
SUSE Linux Enterprise Server 11 SP4-LTSS	kernel-source	Not affected
SUSE Linux Enterprise Server 12	kernel-ec2	Released
SUSE Linux Enterprise Server 12	kernel-source	Affected
SUSE Linux Enterprise Server 12 SP1	kernel-source	Affected
SUSE Linux Enterprise Server 12 SP1-LTSS	kernel-default	Released
SUSE Linux Enterprise Server 12 SP1-LTSS	kernel-source	Released
SUSE Linux Enterprise Server 12 SP1-LTSS	kernel-syms	Released
SUSE Linux Enterprise Server 12 SP1-LTSS	kernel-xen	Released
SUSE Linux Enterprise Server 12 SP1-LTSS	kgraft-patch-SLE12-SP1_Update_23	Released
SUSE Linux Enterprise Server 12 SP2	kernel-default	Released
SUSE Linux Enterprise Server 12 SP2	kernel-docs	Released
SUSE Linux Enterprise Server 12 SP2	kernel-obs-build	Released
SUSE Linux Enterprise Server 12 SP2	kernel-source	Released
SUSE Linux Enterprise Server 12 SP2	kernel-syms	Released
SUSE Linux Enterprise Server 12 SP2-BCL	kernel-default	Affected
SUSE Linux Enterprise Server 12 SP2-BCL	kernel-source	Affected
SUSE Linux Enterprise Server 12 SP2-BCL	kgraft-patch-SLE12-SP2_Update_10	Affected
SUSE Linux Enterprise Server 12 SP2-BCL	kgraft-patch-SLE12-SP2_Update_11	Affected
SUSE Linux Enterprise Server 12 SP2-BCL	kgraft-patch-SLE12-SP2_Update_12	Affected
SUSE Linux Enterprise Server 12 SP2-BCL	kgraft-patch-SLE12-SP2_Update_13	Affected
SUSE Linux Enterprise Server 12 SP2-BCL	kgraft-patch-SLE12-SP2_Update_14	Affected
SUSE Linux Enterprise Server 12 SP2-BCL	kgraft-patch-SLE12-SP2_Update_7	Affected
SUSE Linux Enterprise Server 12 SP2-BCL	kgraft-patch-SLE12-SP2_Update_8	Affected
SUSE Linux Enterprise Server 12 SP2-BCL	kgraft-patch-SLE12-SP2_Update_9	Affected
SUSE Linux Enterprise Server 12 SP2-ESPOS	kernel-source	Affected
SUSE Linux Enterprise Server 12 SP2-ESPOS	kgraft-patch-SLE12-SP2_Update_10	Affected
SUSE Linux Enterprise Server 12 SP2-ESPOS	kgraft-patch-SLE12-SP2_Update_11	Affected
SUSE Linux Enterprise Server 12 SP2-ESPOS	kgraft-patch-SLE12-SP2_Update_12	Affected
SUSE Linux Enterprise Server 12 SP2-ESPOS	kgraft-patch-SLE12-SP2_Update_13	Affected
SUSE Linux Enterprise Server 12 SP2-ESPOS	kgraft-patch-SLE12-SP2_Update_14	Affected
SUSE Linux Enterprise Server 12 SP2-ESPOS	kgraft-patch-SLE12-SP2_Update_7	Affected
SUSE Linux Enterprise Server 12 SP2-ESPOS	kgraft-patch-SLE12-SP2_Update_8	Affected
SUSE Linux Enterprise Server 12 SP2-ESPOS	kgraft-patch-SLE12-SP2_Update_9	Affected
SUSE Linux Enterprise Server 12 SP2-LTSS	kernel-source	Affected
SUSE Linux Enterprise Server 12 SP2-LTSS	kgraft-patch-SLE12-SP2_Update_10	Affected
SUSE Linux Enterprise Server 12 SP2-LTSS	kgraft-patch-SLE12-SP2_Update_11	Affected
SUSE Linux Enterprise Server 12 SP2-LTSS	kgraft-patch-SLE12-SP2_Update_12	Affected
SUSE Linux Enterprise Server 12 SP2-LTSS	kgraft-patch-SLE12-SP2_Update_13	Affected
SUSE Linux Enterprise Server 12 SP2-LTSS	kgraft-patch-SLE12-SP2_Update_14	Affected
SUSE Linux Enterprise Server 12 SP2-LTSS	kgraft-patch-SLE12-SP2_Update_7	Affected
SUSE Linux Enterprise Server 12 SP2-LTSS	kgraft-patch-SLE12-SP2_Update_8	Affected
SUSE Linux Enterprise Server 12 SP2-LTSS	kgraft-patch-SLE12-SP2_Update_9	Affected
SUSE Linux Enterprise Server 12 SP3	kernel-default	Released
SUSE Linux Enterprise Server 12 SP3	kernel-docs	Released
SUSE Linux Enterprise Server 12 SP3	kernel-ec2	Released
SUSE Linux Enterprise Server 12 SP3	kernel-obs-build	Released
SUSE Linux Enterprise Server 12 SP3	kernel-source	Released
SUSE Linux Enterprise Server 12 SP3	kernel-source-azure	Affected
SUSE Linux Enterprise Server 12 SP3	kernel-syms	Released
SUSE Linux Enterprise Server 12 SP3-BCL	kernel-default	Unsupported
SUSE Linux Enterprise Server 12 SP3-BCL	kernel-source	Unsupported
SUSE Linux Enterprise Server 12 SP3-BCL	kernel-source-azure	Unsupported
SUSE Linux Enterprise Server 12 SP3-ESPOS	kernel-default	Unsupported
SUSE Linux Enterprise Server 12 SP3-ESPOS	kernel-source	Unsupported
SUSE Linux Enterprise Server 12 SP3-ESPOS	kernel-source-azure	Unsupported
SUSE Linux Enterprise Server 12 SP3-LTSS	kernel-default	Unsupported
SUSE Linux Enterprise Server 12 SP3-LTSS	kernel-source	Unsupported
SUSE Linux Enterprise Server 12 SP3-LTSS	kernel-source-azure	Unsupported
SUSE Linux Enterprise Server 12 SP4	kernel-ec2	Released
SUSE Linux Enterprise Server 12-LTSS	kernel-default	Released
SUSE Linux Enterprise Server 12-LTSS	kernel-source	Released
SUSE Linux Enterprise Server 12-LTSS	kernel-syms	Released
SUSE Linux Enterprise Server 12-LTSS	kernel-xen	Released
SUSE Linux Enterprise Server 12-LTSS	kgraft-patch-SLE12_Update_29	Released
SUSE Linux Enterprise Server 15 SP3-BCL	kernel-source	Ignore
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2	kernel-default	Released
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2	kernel-source	Released
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2	kernel-syms	Released
SUSE Linux Enterprise Server for SAP Applications 12	kernel-ec2	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP1	kernel-default	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP1	kernel-source	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP1	kernel-syms	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP1	kernel-xen	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP1	kgraft-patch-SLE12-SP1_Update_23	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP2	kernel-default	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP2	kernel-docs	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP2	kernel-obs-build	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP2	kernel-source	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP2	kernel-syms	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP2	kgraft-patch-SLE12-SP2_Update_10	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP2	kgraft-patch-SLE12-SP2_Update_11	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP2	kgraft-patch-SLE12-SP2_Update_12	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP2	kgraft-patch-SLE12-SP2_Update_13	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP2	kgraft-patch-SLE12-SP2_Update_14	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP2	kgraft-patch-SLE12-SP2_Update_7	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP2	kgraft-patch-SLE12-SP2_Update_8	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP2	kgraft-patch-SLE12-SP2_Update_9	Affected
SUSE Linux Enterprise Server for SAP Applications 12 SP3	kernel-default	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP3	kernel-docs	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP3	kernel-ec2	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP3	kernel-obs-build	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP3	kernel-source	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP3	kernel-source-azure	Unsupported
SUSE Linux Enterprise Server for SAP Applications 12 SP3	kernel-syms	Released
SUSE Linux Enterprise Server for SAP Applications 12 SP4	kernel-ec2	Released
SUSE Linux Enterprise Software Development Kit 12 SP2	kernel-docs	Released
SUSE Linux Enterprise Software Development Kit 12 SP2	kernel-obs-build	Released
SUSE Linux Enterprise Software Development Kit 12 SP3	kernel-docs	Released
SUSE Linux Enterprise Software Development Kit 12 SP3	kernel-obs-build	Released
SUSE Linux Enterprise Workstation Extension 12 SP2	kernel-default	Released
SUSE Linux Enterprise Workstation Extension 12 SP3	kernel-default	Released
SUSE Manager Proxy 4.2	kernel-default	Ignore
SUSE Manager Proxy 4.2	kernel-source	Ignore
SUSE Manager Retail Branch Server 4.2	kernel-default	Ignore
SUSE Manager Retail Branch Server 4.2	kernel-source	Ignore
SUSE Manager Server 4.2	kernel-default	Ignore
SUSE Manager Server 4.2	kernel-source	Ignore
SUSE OpenStack Cloud 6	kernel-default	Released
SUSE OpenStack Cloud 6	kernel-source	Released
SUSE OpenStack Cloud 6	kernel-syms	Released
SUSE OpenStack Cloud 6	kernel-xen	Released
SUSE OpenStack Cloud 6	kgraft-patch-SLE12-SP1_Update_23	Released
SUSE OpenStack Cloud 7	kernel-source	Affected
SUSE OpenStack Cloud 7	kgraft-patch-SLE12-SP2_Update_10	Affected
SUSE OpenStack Cloud 7	kgraft-patch-SLE12-SP2_Update_11	Affected
SUSE OpenStack Cloud 7	kgraft-patch-SLE12-SP2_Update_12	Affected
SUSE OpenStack Cloud 7	kgraft-patch-SLE12-SP2_Update_13	Affected
SUSE OpenStack Cloud 7	kgraft-patch-SLE12-SP2_Update_14	Affected
SUSE OpenStack Cloud 7	kgraft-patch-SLE12-SP2_Update_7	Affected
SUSE OpenStack Cloud 7	kgraft-patch-SLE12-SP2_Update_8	Affected
SUSE OpenStack Cloud 7	kgraft-patch-SLE12-SP2_Update_9	Affected
SUSE OpenStack Cloud 8	kernel-default	Affected
SUSE OpenStack Cloud 8	kernel-source	Affected
SUSE OpenStack Cloud 8	kernel-source-azure	Affected
SUSE OpenStack Cloud Crowbar 8	kernel-default	Affected
SUSE OpenStack Cloud Crowbar 8	kernel-source	Affected
SUSE OpenStack Cloud Crowbar 8	kernel-source-azure	Affected
SUSE Real Time Module 15 SP3	kernel-source-rt	Ignore
SUSE Real Time Module 15 SP4	kernel-source-rt	Released
openSUSE Leap 15.3	kernel-source	Ignore
openSUSE Leap 15.3	kernel-source-rt	Ignore
openSUSE Leap 15.4	kernel-source-rt	Affected

---

SUSE Timeline for this CVE

CVE page created: Wed Nov 22 21:36:35 2017
CVE page last modified: Fri Nov 1 12:16:06 2024