The openSUSE Leap 15.1 kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate sidechannel information leaks out of microarchitectural buffers, similar to the previously described 'Microarchitectural Data Sampling' attack.
The Linux kernel was supplemented with the option to disable TSX operation altogether (requiring CPU Microcode updates on older systems) and better flushing of microarchitectural buffers (VERW).
The set of options available is described in our TID at https://www.suse.com/support/kb/doc/?id=7024251
CVE-2018-12207: Untrusted virtual machines on Intel CPUs could exploit a race condition in the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional.
The Linux Kernel kvm hypervisor was adjusted to avoid page size changes in executable pages by splitting / merging huge pages into small pages as needed.
More information can be found on https://www.suse.com/support/kb/doc/?id=7023735
The following non-security bugs were fixed:
{ "binaries": [ { "kernel-debug-devel": "4.12.14-lp151.28.32.1", "kernel-source-vanilla": "4.12.14-lp151.28.32.1", "kernel-default-base": "4.12.14-lp151.28.32.1", "kernel-macros": "4.12.14-lp151.28.32.1", "kernel-docs": "4.12.14-lp151.28.32.1", "kernel-kvmsmall-devel": "4.12.14-lp151.28.32.1", "kernel-default": "4.12.14-lp151.28.32.1", "kernel-source": "4.12.14-lp151.28.32.1", "kernel-debug": "4.12.14-lp151.28.32.1", "kernel-syms": "4.12.14-lp151.28.32.1", "kernel-kvmsmall": "4.12.14-lp151.28.32.1", "kernel-devel": "4.12.14-lp151.28.32.1", "kernel-debug-base": "4.12.14-lp151.28.32.1", "kernel-obs-qa": "4.12.14-lp151.28.32.1", "kernel-kvmsmall-base": "4.12.14-lp151.28.32.1", "kernel-docs-html": "4.12.14-lp151.28.32.1", "kernel-obs-build": "4.12.14-lp151.28.32.1", "kernel-vanilla-devel": "4.12.14-lp151.28.32.1", "kernel-default-devel": "4.12.14-lp151.28.32.1", "kernel-vanilla-base": "4.12.14-lp151.28.32.1", "kernel-vanilla": "4.12.14-lp151.28.32.1" } ] }
{ "binaries": [ { "kernel-debug-devel": "4.12.14-lp151.28.32.1", "kernel-source-vanilla": "4.12.14-lp151.28.32.1", "kernel-default-base": "4.12.14-lp151.28.32.1", "kernel-macros": "4.12.14-lp151.28.32.1", "kernel-docs": "4.12.14-lp151.28.32.1", "kernel-kvmsmall-devel": "4.12.14-lp151.28.32.1", "kernel-default": "4.12.14-lp151.28.32.1", "kernel-source": "4.12.14-lp151.28.32.1", "kernel-debug": "4.12.14-lp151.28.32.1", "kernel-syms": "4.12.14-lp151.28.32.1", "kernel-kvmsmall": "4.12.14-lp151.28.32.1", "kernel-devel": "4.12.14-lp151.28.32.1", "kernel-debug-base": "4.12.14-lp151.28.32.1", "kernel-obs-qa": "4.12.14-lp151.28.32.1", "kernel-kvmsmall-base": "4.12.14-lp151.28.32.1", "kernel-docs-html": "4.12.14-lp151.28.32.1", "kernel-obs-build": "4.12.14-lp151.28.32.1", "kernel-vanilla-devel": "4.12.14-lp151.28.32.1", "kernel-default-devel": "4.12.14-lp151.28.32.1", "kernel-vanilla-base": "4.12.14-lp151.28.32.1", "kernel-vanilla": "4.12.14-lp151.28.32.1" } ] }
{ "binaries": [ { "kernel-debug-devel": "4.12.14-lp151.28.32.1", "kernel-source-vanilla": "4.12.14-lp151.28.32.1", "kernel-default-base": "4.12.14-lp151.28.32.1", "kernel-macros": "4.12.14-lp151.28.32.1", "kernel-docs": "4.12.14-lp151.28.32.1", "kernel-kvmsmall-devel": "4.12.14-lp151.28.32.1", "kernel-default": "4.12.14-lp151.28.32.1", "kernel-source": "4.12.14-lp151.28.32.1", "kernel-debug": "4.12.14-lp151.28.32.1", "kernel-syms": "4.12.14-lp151.28.32.1", "kernel-kvmsmall": "4.12.14-lp151.28.32.1", "kernel-devel": "4.12.14-lp151.28.32.1", "kernel-debug-base": "4.12.14-lp151.28.32.1", "kernel-obs-qa": "4.12.14-lp151.28.32.1", "kernel-kvmsmall-base": "4.12.14-lp151.28.32.1", "kernel-docs-html": "4.12.14-lp151.28.32.1", "kernel-obs-build": "4.12.14-lp151.28.32.1", "kernel-vanilla-devel": "4.12.14-lp151.28.32.1", "kernel-default-devel": "4.12.14-lp151.28.32.1", "kernel-vanilla-base": "4.12.14-lp151.28.32.1", "kernel-vanilla": "4.12.14-lp151.28.32.1" } ] }
{ "binaries": [ { "kernel-debug-devel": "4.12.14-lp151.28.32.1", "kernel-source-vanilla": "4.12.14-lp151.28.32.1", "kernel-default-base": "4.12.14-lp151.28.32.1", "kernel-macros": "4.12.14-lp151.28.32.1", "kernel-docs": "4.12.14-lp151.28.32.1", "kernel-kvmsmall-devel": "4.12.14-lp151.28.32.1", "kernel-default": "4.12.14-lp151.28.32.1", "kernel-source": "4.12.14-lp151.28.32.1", "kernel-debug": "4.12.14-lp151.28.32.1", "kernel-syms": "4.12.14-lp151.28.32.1", "kernel-kvmsmall": "4.12.14-lp151.28.32.1", "kernel-devel": "4.12.14-lp151.28.32.1", "kernel-debug-base": "4.12.14-lp151.28.32.1", "kernel-obs-qa": "4.12.14-lp151.28.32.1", "kernel-kvmsmall-base": "4.12.14-lp151.28.32.1", "kernel-docs-html": "4.12.14-lp151.28.32.1", "kernel-obs-build": "4.12.14-lp151.28.32.1", "kernel-vanilla-devel": "4.12.14-lp151.28.32.1", "kernel-default-devel": "4.12.14-lp151.28.32.1", "kernel-vanilla-base": "4.12.14-lp151.28.32.1", "kernel-vanilla": "4.12.14-lp151.28.32.1" } ] }
{ "binaries": [ { "kernel-debug-devel": "4.12.14-lp151.28.32.1", "kernel-source-vanilla": "4.12.14-lp151.28.32.1", "kernel-default-base": "4.12.14-lp151.28.32.1", "kernel-macros": "4.12.14-lp151.28.32.1", "kernel-docs": "4.12.14-lp151.28.32.1", "kernel-kvmsmall-devel": "4.12.14-lp151.28.32.1", "kernel-default": "4.12.14-lp151.28.32.1", "kernel-source": "4.12.14-lp151.28.32.1", "kernel-debug": "4.12.14-lp151.28.32.1", "kernel-syms": "4.12.14-lp151.28.32.1", "kernel-kvmsmall": "4.12.14-lp151.28.32.1", "kernel-devel": "4.12.14-lp151.28.32.1", "kernel-debug-base": "4.12.14-lp151.28.32.1", "kernel-obs-qa": "4.12.14-lp151.28.32.1", "kernel-kvmsmall-base": "4.12.14-lp151.28.32.1", "kernel-docs-html": "4.12.14-lp151.28.32.1", "kernel-obs-build": "4.12.14-lp151.28.32.1", "kernel-vanilla-devel": "4.12.14-lp151.28.32.1", "kernel-default-devel": "4.12.14-lp151.28.32.1", "kernel-vanilla-base": "4.12.14-lp151.28.32.1", "kernel-vanilla": "4.12.14-lp151.28.32.1" } ] }
{ "binaries": [ { "kernel-debug-devel": "4.12.14-lp151.28.32.1", "kernel-source-vanilla": "4.12.14-lp151.28.32.1", "kernel-default-base": "4.12.14-lp151.28.32.1", "kernel-macros": "4.12.14-lp151.28.32.1", "kernel-docs": "4.12.14-lp151.28.32.1", "kernel-kvmsmall-devel": "4.12.14-lp151.28.32.1", "kernel-default": "4.12.14-lp151.28.32.1", "kernel-source": "4.12.14-lp151.28.32.1", "kernel-debug": "4.12.14-lp151.28.32.1", "kernel-syms": "4.12.14-lp151.28.32.1", "kernel-kvmsmall": "4.12.14-lp151.28.32.1", "kernel-devel": "4.12.14-lp151.28.32.1", "kernel-debug-base": "4.12.14-lp151.28.32.1", "kernel-obs-qa": "4.12.14-lp151.28.32.1", "kernel-kvmsmall-base": "4.12.14-lp151.28.32.1", "kernel-docs-html": "4.12.14-lp151.28.32.1", "kernel-obs-build": "4.12.14-lp151.28.32.1", "kernel-vanilla-devel": "4.12.14-lp151.28.32.1", "kernel-default-devel": "4.12.14-lp151.28.32.1", "kernel-vanilla-base": "4.12.14-lp151.28.32.1", "kernel-vanilla": "4.12.14-lp151.28.32.1" } ] }
{ "binaries": [ { "kernel-debug-devel": "4.12.14-lp151.28.32.1", "kernel-source-vanilla": "4.12.14-lp151.28.32.1", "kernel-default-base": "4.12.14-lp151.28.32.1", "kernel-macros": "4.12.14-lp151.28.32.1", "kernel-docs": "4.12.14-lp151.28.32.1", "kernel-kvmsmall-devel": "4.12.14-lp151.28.32.1", "kernel-default": "4.12.14-lp151.28.32.1", "kernel-source": "4.12.14-lp151.28.32.1", "kernel-debug": "4.12.14-lp151.28.32.1", "kernel-syms": "4.12.14-lp151.28.32.1", "kernel-kvmsmall": "4.12.14-lp151.28.32.1", "kernel-devel": "4.12.14-lp151.28.32.1", "kernel-debug-base": "4.12.14-lp151.28.32.1", "kernel-obs-qa": "4.12.14-lp151.28.32.1", "kernel-kvmsmall-base": "4.12.14-lp151.28.32.1", "kernel-docs-html": "4.12.14-lp151.28.32.1", "kernel-obs-build": "4.12.14-lp151.28.32.1", "kernel-vanilla-devel": "4.12.14-lp151.28.32.1", "kernel-default-devel": "4.12.14-lp151.28.32.1", "kernel-vanilla-base": "4.12.14-lp151.28.32.1", "kernel-vanilla": "4.12.14-lp151.28.32.1" } ] }
{ "binaries": [ { "kernel-debug-devel": "4.12.14-lp151.28.32.1", "kernel-source-vanilla": "4.12.14-lp151.28.32.1", "kernel-default-base": "4.12.14-lp151.28.32.1", "kernel-macros": "4.12.14-lp151.28.32.1", "kernel-docs": "4.12.14-lp151.28.32.1", "kernel-kvmsmall-devel": "4.12.14-lp151.28.32.1", "kernel-default": "4.12.14-lp151.28.32.1", "kernel-source": "4.12.14-lp151.28.32.1", "kernel-debug": "4.12.14-lp151.28.32.1", "kernel-syms": "4.12.14-lp151.28.32.1", "kernel-kvmsmall": "4.12.14-lp151.28.32.1", "kernel-devel": "4.12.14-lp151.28.32.1", "kernel-debug-base": "4.12.14-lp151.28.32.1", "kernel-obs-qa": "4.12.14-lp151.28.32.1", "kernel-kvmsmall-base": "4.12.14-lp151.28.32.1", "kernel-docs-html": "4.12.14-lp151.28.32.1", "kernel-obs-build": "4.12.14-lp151.28.32.1", "kernel-vanilla-devel": "4.12.14-lp151.28.32.1", "kernel-default-devel": "4.12.14-lp151.28.32.1", "kernel-vanilla-base": "4.12.14-lp151.28.32.1", "kernel-vanilla": "4.12.14-lp151.28.32.1" } ] }
{ "binaries": [ { "kernel-debug-devel": "4.12.14-lp151.28.32.1", "kernel-source-vanilla": "4.12.14-lp151.28.32.1", "kernel-default-base": "4.12.14-lp151.28.32.1", "kernel-macros": "4.12.14-lp151.28.32.1", "kernel-docs": "4.12.14-lp151.28.32.1", "kernel-kvmsmall-devel": "4.12.14-lp151.28.32.1", "kernel-default": "4.12.14-lp151.28.32.1", "kernel-source": "4.12.14-lp151.28.32.1", "kernel-debug": "4.12.14-lp151.28.32.1", "kernel-syms": "4.12.14-lp151.28.32.1", "kernel-kvmsmall": "4.12.14-lp151.28.32.1", "kernel-devel": "4.12.14-lp151.28.32.1", "kernel-debug-base": "4.12.14-lp151.28.32.1", "kernel-obs-qa": "4.12.14-lp151.28.32.1", "kernel-kvmsmall-base": "4.12.14-lp151.28.32.1", "kernel-docs-html": "4.12.14-lp151.28.32.1", "kernel-obs-build": "4.12.14-lp151.28.32.1", "kernel-vanilla-devel": "4.12.14-lp151.28.32.1", "kernel-default-devel": "4.12.14-lp151.28.32.1", "kernel-vanilla-base": "4.12.14-lp151.28.32.1", "kernel-vanilla": "4.12.14-lp151.28.32.1" } ] }