Описание
Security update for the Linux Kernel (Live Patch 2 for SLE 15)
This update for the Linux Kernel 4.12.14-25_6 fixes one issue.
The following security issue was fixed:
- CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present in the L1 Datacache used by other hyperthreads on the same CPU core, potentially leaking sensitive data, even from other virtual machines or the host system (bsc#1099306).
Список пакетов
SUSE Linux Enterprise Live Patching 15
kernel-livepatch-4_12_14-25_6-default-2-2.1
Ссылки
- Link for SUSE-SU-2018:2473-1
- E-Mail link for SUSE-SU-2018:2473-1
- SUSE Security Ratings
- SUSE Bug 1099306
- SUSE CVE CVE-2018-3646 page
Описание
Systems with microprocessors utilizing speculative execution and address translations may allow unauthorized disclosure of information residing in the L1 data cache to an attacker with local user access with guest OS privilege via a terminal page fault and a side-channel analysis.
Затронутые продукты
SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-25_6-default-2-2.1
Ссылки
- CVE-2018-3646
- SUSE Bug 1087078
- SUSE Bug 1087081
- SUSE Bug 1089343
- SUSE Bug 1091107
- SUSE Bug 1099306
- SUSE Bug 1104365
- SUSE Bug 1104894
- SUSE Bug 1106548
- SUSE Bug 1113534
- SUSE Bug 1136865
- SUSE Bug 1178658
- SUSE Bug 1201877