Test ID:	1.3.6.1.4.1.25623.1.0.814563
Category:	SuSE Local Security Checks
Title:	openSUSE: Security Advisory for kernel (openSUSE-SU-2018:4133-1)
Summary:	The remote host is missing an update for the 'kernel'; package(s) announced via the openSUSE-SU-2018:4133-1 advisory.
Description:	Summary: The remote host is missing an update for the 'kernel' package(s) announced via the openSUSE-SU-2018:4133-1 advisory. Vulnerability Insight: The openSUSE Leap 15.0 kernel was updated to 4.12.14-lp150.12.28.1 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-18281: The mremap() syscall performs TLB flushes after dropping pagetable locks. If a syscall such as ftruncate() removes entries from the pagetables of a task that is in the middle of mremap(), a stale TLB entry can remain for a short time that permits access to a physical page after it has been released back to the page allocator and reused. (bnc#1113769). The following non-security bugs were fixed: - ACPI / LPSS: Add alternative ACPI HIDs for Cherry Trail DMA controllers (bsc#1051510). - ACPI / platform: Add SMB0001 HID to forbidden_id_list (bsc#1051510). - ACPI / watchdog: Prefer iTCO_wdt always when WDAT table uses RTC SRAM (bsc#1051510). - ACPI/APEI: Handle GSIV and GPIO notification types (bsc#1115567). - ACPI/IORT: Fix iort_get_platform_device_domain() uninitialized pointer value (bsc#1051510). - ACPICA: Tables: Add WSMT support (bsc#1089350). - ALSA: ac97: Fix incorrect bit shift at AC97-SPSA control write (bsc#1051510). - ALSA: ca0106: Disable IZD on SB0570 DAC to fix audio pops (bsc#1051510). - ALSA: control: Fix race between adding and removing a user element (bsc#1051510). - ALSA: hda/ca0132 - Call pci_iounmap() instead of iounmap() (bsc#1051510). - ALSA: hda/realtek - Add GPIO data update helper (bsc#1051510). - ALSA: hda/realtek - Add auto-mute quirk for HP Spectre x360 laptop (bsc#1051510). - ALSA: hda/realtek - Allow skipping spec- init_amp detection (bsc#1051510). - ALSA: hda/realtek - Fix HP Headset Mic can't record (bsc#1051510). - ALSA: hda/realtek - Manage GPIO bits commonly (bsc#1051510). - ALSA: hda/realtek - Simplify Dell XPS13 GPIO handling (bsc#1051510). - ALSA: hda/realtek - Support ALC300 (bsc#1051510). - ALSA: hda/realtek - fix headset mic detection for MSI MS-B171 (bsc#1051510). - ALSA: hda/realtek - fix the pop noise on headphone for lenovo laptops (bsc#1051510). - ALSA: hda: Add ASRock N68C-S UCC the power_save blacklist (bsc#1051510). - ALSA: oss: Use kvzalloc() for local buffer allocations (bsc#1051510). - ALSA: sparc: Fix invalid snd_free_pages() at error path (bsc#1051510). - ALSA: usb-audio: Add vendor and product name for Dell WD19 Dock (bsc#1051510). - ALSA: wss: Fix invalid snd_free_pages() at error path (bsc#1051510). - ARM: dts: at91: add new compatibility string for macb on sama5d3 (bsc#1051510). - ASoC: Intel: cht_bsw_max98090: add support for Baytrail (bsc#1051510). - ASoC: dwc: Added a ... Description truncated, please see the referenced URL(s) for more information. Affected Software/OS: the on openSUSE Leap 15.0. Solution: Please install the updated package(s). CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-18281 BugTraq ID: 105761 http://www.securityfocus.com/bid/105761 BugTraq ID: 106503 http://www.securityfocus.com/bid/106503 http://packetstormsecurity.com/files/150001/Linux-mremap-TLB-Flush-Too-Late.html https://bugs.chromium.org/p/project-zero/issues/detail?id=1695 https://lists.debian.org/debian-lts-announce/2019/03/msg00017.html https://lists.debian.org/debian-lts-announce/2019/03/msg00034.html https://lists.debian.org/debian-lts-announce/2019/04/msg00004.html http://www.openwall.com/lists/oss-security/2018/10/29/5 RedHat Security Advisories: RHSA-2019:0831 https://access.redhat.com/errata/RHSA-2019:0831 RedHat Security Advisories: RHSA-2019:2029 https://access.redhat.com/errata/RHSA-2019:2029 RedHat Security Advisories: RHSA-2019:2043 https://access.redhat.com/errata/RHSA-2019:2043 RedHat Security Advisories: RHSA-2020:0036 https://access.redhat.com/errata/RHSA-2020:0036 RedHat Security Advisories: RHSA-2020:0100 https://access.redhat.com/errata/RHSA-2020:0100 RedHat Security Advisories: RHSA-2020:0103 https://access.redhat.com/errata/RHSA-2020:0103 RedHat Security Advisories: RHSA-2020:0179 https://access.redhat.com/errata/RHSA-2020:0179 https://usn.ubuntu.com/3832-1/ https://usn.ubuntu.com/3835-1/ https://usn.ubuntu.com/3871-1/ https://usn.ubuntu.com/3871-3/ https://usn.ubuntu.com/3871-4/ https://usn.ubuntu.com/3871-5/ https://usn.ubuntu.com/3880-1/ https://usn.ubuntu.com/3880-2/
Copyright	Copyright (C) 2018 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.