The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
Unprivileged BPF has been disabled by default to reduce attack surface as too many security issues have happened in the past (jsc#SLE-22573)
You can reenable via systemctl setting /proc/sys/kernel/unprivilegedbpfdisabled to 0. (kernel.unprivilegedbpfdisabled = 0)
The following security bugs were fixed:
int_ctl
VMCB field and allows a malicious L1 guest to enable AVIC support for the L2 guest. (bsc#1189399).virt_ext
VMCB field and allows a malicious L1 guest to disable both VMLOAD/VMSAVE intercepts and VLS for the L2 guest (bsc#1189400).The following non-security bugs were fixed:
{ "binaries": [ { "kernel-macros": "4.12.14-95.83.2", "kernel-devel": "4.12.14-95.83.2", "kernel-default-base": "4.12.14-95.83.2", "kernel-default": "4.12.14-95.83.2", "kernel-source": "4.12.14-95.83.2", "kernel-syms": "4.12.14-95.83.2", "kernel-default-devel": "4.12.14-95.83.2" } ] }
{ "binaries": [ { "kernel-macros": "4.12.14-95.83.2", "kernel-devel": "4.12.14-95.83.2", "kernel-default-base": "4.12.14-95.83.2", "kernel-default": "4.12.14-95.83.2", "kernel-source": "4.12.14-95.83.2", "kernel-syms": "4.12.14-95.83.2", "kernel-default-devel": "4.12.14-95.83.2" } ] }
{ "binaries": [ { "kernel-macros": "4.12.14-95.83.2", "kernel-devel": "4.12.14-95.83.2", "kernel-default-base": "4.12.14-95.83.2", "kernel-default": "4.12.14-95.83.2", "kernel-source": "4.12.14-95.83.2", "kernel-syms": "4.12.14-95.83.2", "kernel-default-devel": "4.12.14-95.83.2" } ] }
{ "binaries": [ { "kernel-macros": "4.12.14-95.83.2", "kernel-devel": "4.12.14-95.83.2", "kernel-default-base": "4.12.14-95.83.2", "kernel-default": "4.12.14-95.83.2", "kernel-source": "4.12.14-95.83.2", "kernel-syms": "4.12.14-95.83.2", "kernel-default-devel": "4.12.14-95.83.2" } ] }
{ "binaries": [ { "kernel-macros": "4.12.14-95.83.2", "kernel-devel": "4.12.14-95.83.2", "kernel-default-base": "4.12.14-95.83.2", "kernel-default": "4.12.14-95.83.2", "kernel-source": "4.12.14-95.83.2", "kernel-syms": "4.12.14-95.83.2", "kernel-default-devel": "4.12.14-95.83.2" } ] }
{ "binaries": [ { "kernel-macros": "4.12.14-95.83.2", "kernel-devel": "4.12.14-95.83.2", "kernel-default-base": "4.12.14-95.83.2", "kernel-default": "4.12.14-95.83.2", "kernel-source": "4.12.14-95.83.2", "kernel-syms": "4.12.14-95.83.2", "kernel-default-devel": "4.12.14-95.83.2" } ] }
{ "binaries": [ { "kernel-macros": "4.12.14-95.83.2", "kernel-devel": "4.12.14-95.83.2", "kernel-default-base": "4.12.14-95.83.2", "kernel-default": "4.12.14-95.83.2", "kernel-source": "4.12.14-95.83.2", "kernel-syms": "4.12.14-95.83.2", "kernel-default-devel": "4.12.14-95.83.2" } ] }
{ "binaries": [ { "kernel-macros": "4.12.14-95.83.2", "kernel-devel": "4.12.14-95.83.2", "kernel-default-base": "4.12.14-95.83.2", "kernel-default": "4.12.14-95.83.2", "kernel-source": "4.12.14-95.83.2", "kernel-syms": "4.12.14-95.83.2", "kernel-default-devel": "4.12.14-95.83.2" } ] }
{ "binaries": [ { "kernel-macros": "4.12.14-95.83.2", "kernel-devel": "4.12.14-95.83.2", "kernel-default-base": "4.12.14-95.83.2", "kernel-default": "4.12.14-95.83.2", "kernel-source": "4.12.14-95.83.2", "kernel-syms": "4.12.14-95.83.2", "kernel-default-devel": "4.12.14-95.83.2" } ] }
{ "binaries": [ { "kernel-macros": "4.12.14-95.83.2", "kernel-devel": "4.12.14-95.83.2", "kernel-default-base": "4.12.14-95.83.2", "kernel-default-man": "4.12.14-95.83.2", "kernel-default": "4.12.14-95.83.2", "kernel-source": "4.12.14-95.83.2", "kernel-syms": "4.12.14-95.83.2", "kernel-default-devel": "4.12.14-95.83.2" } ] }
{ "binaries": [ { "kernel-macros": "4.12.14-95.83.2", "kernel-devel": "4.12.14-95.83.2", "kernel-default-base": "4.12.14-95.83.2", "kernel-default-man": "4.12.14-95.83.2", "kernel-default": "4.12.14-95.83.2", "kernel-source": "4.12.14-95.83.2", "kernel-syms": "4.12.14-95.83.2", "kernel-default-devel": "4.12.14-95.83.2" } ] }
{ "binaries": [ { "kernel-macros": "4.12.14-95.83.2", "kernel-devel": "4.12.14-95.83.2", "kernel-default-base": "4.12.14-95.83.2", "kernel-default-man": "4.12.14-95.83.2", "kernel-default": "4.12.14-95.83.2", "kernel-source": "4.12.14-95.83.2", "kernel-syms": "4.12.14-95.83.2", "kernel-default-devel": "4.12.14-95.83.2" } ] }