Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:2426-1

Опубликовано: 17 авг. 2018
Источник: suse-cvrf

Описание

Security update for kernel-livepatch-tools

This update for kernel-livepatch-tools fixes the following issues:

Add script for disabling SMT to help with the mitigation of the 'L1 Terminal Fault' issue (CVE-2018-3646 bsc#1099306)

The script is called 'klp-kvm-l1tf-ctrl-smt' and is used for enabling or disabling SMT to mitigate the issue when this administrative decision is taken.

Disabling SMT:

klp-kvm-l1tf-ctrl-smt -d

Enabling SMT:

klp-kvm-l1tf-ctrl-smt -e

Список пакетов

SUSE Linux Enterprise Live Patching 12 SP3
kgraft-patch-4_4_138-94_39-default-2-2.1
kgraft-patch-4_4_140-94_42-default-2-2.1
SUSE Linux Enterprise Live Patching 15
kernel-livepatch-tools-1.1-5.3.1

Ссылки

Описание

Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.

Затронутые продукты
SUSE Linux Enterprise Live Patching 12 SP3:kgraft-patch-4_4_138-94_39-default-2-2.1
SUSE Linux Enterprise Live Patching 12 SP3:kgraft-patch-4_4_140-94_42-default-2-2.1
SUSE Linux Enterprise Live Patching 15:kernel-livepatch-tools-1.1-5.3.1
Ссылки