The SUSE Linux Enterprise 12 SP3 Azure kernel was updated to 4.4.143 to receive various security and bugfixes.
The following security bugs were fixed:
CVE-2018-3620: Local attackers on baremetal systems could use speculative code patterns on hyperthreaded processors to read data present in the L1 Datacache used by other hyperthreads on
the same CPU core, potentially leaking sensitive data. (bnc#1087081).
CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present in the L1 Datacache used by other hyperthreads on the same CPU core, potentially leaking sensitive data, even from other virtual machines or the host system. (bnc#1089343).
CVE-2018-5391: A flaw in the IP packet reassembly could be used by remote attackers to consume CPU time (bnc#1103097).
CVE-2018-5390: Linux kernel versions 4.9+ can be forced to make very expensive calls to tcpcollapseofoqueue() and tcppruneofoqueue() for every incoming packet which can lead to a denial of service (bnc#1102340).
CVE-2018-14734: drivers/infiniband/core/ucma.c allowed ucmaleavemulticast to access a certain data structure after a cleanup step in ucmaprocessjoin, which allowed attackers to cause a denial of service (use-after-free) (bnc#1103119).
CVE-2017-18344: The timercreate syscall implementation in kernel/time/posix-timers.c didn't properly validate the sigevent->sigevnotify field, which leads to out-of-bounds access in the showtimer function (called when /proc/$PID/timers is read). This allowed userspace applications to read arbitrary kernel memory (on a kernel built with CONFIGPOSIXTIMERS and CONFIGCHECKPOINT_RESTORE) (bnc#1102851 1103580).
The following non-security bugs were fixed:
1wire: family module autoload fails because of upper/lower case mismatch (bnc#1012382).
Add support for 5,25,50, and 100G to 802.3ad bonding driver (bsc#1096978)
ahci: Disable LPM on Lenovo 50 series laptops with a too old BIOS (bnc#1012382).
alsa: hda - Fix pincfg at resume on Lenovo T470 dock (bsc#1099810).
alsa: hda - Handle kzalloc() failure in sndhdaattachpcmstream() (bnc#1012382).
alsa: hda/realtek - set PINCFGHEADSETMIC to parse_flags (bsc#1099810).
arm64: do not open code page table entry creation (bsc#1102197).
arm64: kpti: Use early_param for kpti= command-line option (bsc#1102188).
arm64: Make sure permission updates happen for pmd/pud (bsc#1102197).
arm: 8764/1: kgdb: fix NUMREGBYTES so that gdb_regs[] is the correct size (bnc#1012382).
arm: dts: imx6q: Use correct SDMA script for SPI5 core (bnc#1012382).
Revert 'Btrfs: fix scrub to repair raid6 corruption' (bnc#1012382).
Revert 'sit: reload iphdr in ipip6_rcv' (bnc#1012382).
Revert 'x86/cpufeature: Move some of the scattered feature bits to x86_capability' (kabi).
Revert 'x86/cpu: Probe CPUID leaf 6 even when cpuid_level == 6' (kabi).
rmdir(),rename(): do shrinkdcacheparent() only on success (bsc#1100340).
rpm/config.sh: Add support for non-default upstream URL Currently the scripts assume Linus' tree as the upstream URL where to pull things from. One may want to package test kernels from other upstream repos. Add support to add an URL to config.sh.
rtlwifi: rtl8821ae: fix firmware is not ready to run (bnc#1012382).
run_oldconfig.sh: Add --olddefconfig as an alias to --yes On later kernels there is the make target 'olddefconfig'. This is equvalent to what the '--yes' option does. Therefore, add the option '--olddefconfig' as an alias.
s390: Correct register corruption in critical section cleanup (bnc#1012382).
s390/qeth: fix error handling in adapter command callbacks (bnc#1103745, LTC#169699).
sched/smt: Update schedsmtpresent at runtime (bsc#1089343).
sched/sysctl: Check user input value of sysctlschedtime_avg (bsc#1100089).
scsi: lpfc: Change IO submit return to EBUSY if remote port is recovering (bsc#1092207).
scsi: lpfc: correct oversubscription of nvme io requests for an adapter (bsc#1095453).
scsi: lpfc: Driver NVME load fails when CPU cnt > WQ resource cnt (bsc#1092207).