Описание
Security update for drm
This update for drm provides the following fixes:
This security issue was fixed:
- CVE-2017-10810: Memory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c allowed attackers to cause a denial of service (memory consumption) by triggering object-initialization failures (bnc#1047277)
These non-security issues were fixed:
- Backport upstream 4.9.x stable fixes up to 4.9.81 (bsc#1041744).
- Fixed crash at suspend/resume on old Intel chipsets (bsc#1047729, bsc#1050256)
- Fixed large topology support for vmwgfx (bsc#1048155)
- Workaround for BXT aperture vs GTT chip bug (bsc#1046821)
- Limit the supplements for the default hardware support to only Intel Skylake / Kabylake and AMDGPU (bsc#1077885) 4.9.x i915 seems more buggy than expected for old chipsets.
- Conditionally build aarch64 as well (bsc#1066175)
- Build host1x module (taken from the kernel-source) as well for avoiding the unneeded dependency on kernel-default-extra on ARM64 (bsc#1066175)
- Enable AMDGPU CIK and SI (bsc#1066175):
- Add missing hisilicon hibmc driver (bsc#1066175):
- Add si_support and cik_support options to radeon and amdgpu (bsc#1066175):
- Update Module.supported and apply it properly; following SLE12-SP3 kernel status
- Backport the upstream DP-MST fixes, addressing a hang at S3 resume (bsc#1055493):
Список пакетов
SUSE Linux Enterprise Desktop 12 SP3
drm-kmp-default-4.9.33_k4.4.114_94.11-4.11.1
SUSE Linux Enterprise Workstation Extension 12 SP3
drm-kmp-default-4.9.33_k4.4.114_94.11-4.11.1
Ссылки
- Link for SUSE-SU-2018:0509-1
- E-Mail link for SUSE-SU-2018:0509-1
- SUSE Security Ratings
- SUSE Bug 1041744
- SUSE Bug 1046821
- SUSE Bug 1047277
- SUSE Bug 1047729
- SUSE Bug 1048155
- SUSE Bug 1050256
- SUSE Bug 1055493
- SUSE Bug 1066175
- SUSE Bug 1077885
- SUSE CVE CVE-2017-10810 page
Описание
Memory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c in the Linux kernel through 4.11.8 allows attackers to cause a denial of service (memory consumption) by triggering object-initialization failures.
Затронутые продукты
SUSE Linux Enterprise Desktop 12 SP3:drm-kmp-default-4.9.33_k4.4.114_94.11-4.11.1
SUSE Linux Enterprise Workstation Extension 12 SP3:drm-kmp-default-4.9.33_k4.4.114_94.11-4.11.1
Ссылки
- CVE-2017-10810
- SUSE Bug 1047277