{"schemaVersion":3,"id":"SUSE-SU-2019:14127-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for the Linux Kernel\n\n\nThe SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security and bugfixes.\n\nThe following security bugs were fixed:\n\n- CVE-2019-3459: A heap address information leak while using L2CAP_GET_CONF_OPT was discovered in the Linux kernel(bnc#1120758).\n- CVE-2019-3460: A heap data infoleak in multiple locations including L2CAP_PARSE_CONF_RSP was found in the Linux kernel before (bnc#1120758).\n- CVE-2019-3896: A double-free could happen in idr_remove_all() in lib/idr.c in the Linux kernel. An unprivileged local attacker could use this flaw for a privilege escalation or for a system crash and a denial of service (DoS) (bnc#1138943).\n- CVE-2018-5390: The Linux kernel could be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which could lead to a denial of service (bnc#1102340).\n- CVE-2018-20836: An issue was discovered in the Linux kernel There was a race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, leading to a use-after-free (bnc#1134395).\n- CVE-2019-12614: An issue was discovered in dlpar_parse_cc_property in arch/powerpc/platforms/pseries/dlpar.c in the Linux kernel There was an unchecked kstrdup of prop-name, which might allow an attacker to cause a denial of service (NULL pointer dereference and system crash) (bnc#1137194).\n- CVE-2019-3846: A flaw that allowed an attacker to corrupt memory and possibly escalate privileges was found in the mwifiex kernel module while connecting to a malicious wireless network (bnc#1136424 1136446).\n\nThe following non-security bugs were fixed:\n\n- KEYS: do not let add_key() update an uninstantiated key (bnc#1063416).\n- fnic: Fix to cleanup aborted IO to avoid device being offlined by mid-layer (bsc#1134835).\n- signal: give SEND_SIG_FORCED more power to beat SIGNAL_UNKILLABLE (bsc#1135650).\n- signal: oom_kill_task: use SEND_SIG_FORCED instead of force_sig() (bsc#1135650).\n- tcp: a regression in the previous fix for the TCP SACK issue was fixed (bnc#1139751)","dates":{"published":"2019-07-18T15:53:32.000Z","modified":"2026-02-04T02:51:27.503Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"kernel-bigmem&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","name":"kernel-bigmem","label":"kernel-bigmem&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-bigmem&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 3.0.101-108.98.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.98.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-default&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","name":"kernel-default","label":"kernel-default&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-default&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 3.0.101-108.98.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.98.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-ec2&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","name":"kernel-ec2","label":"kernel-ec2&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-ec2&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 3.0.101-108.98.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.98.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-pae&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","name":"kernel-pae","label":"kernel-pae&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-pae&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 3.0.101-108.98.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.98.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-ppc64&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","name":"kernel-ppc64","label":"kernel-ppc64&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-ppc64&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 3.0.101-108.98.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.98.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-source&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","name":"kernel-source","label":"kernel-source&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-source&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 3.0.101-108.98.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.98.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-syms&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","name":"kernel-syms","label":"kernel-syms&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-syms&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 3.0.101-108.98.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.98.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-trace&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","name":"kernel-trace","label":"kernel-trace&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-trace&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 3.0.101-108.98.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.98.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-xen&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","name":"kernel-xen","label":"kernel-xen&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-xen&distro=SUSE Linux Enterprise Server 11 SP4-LTSS","purlType":"rpm","versions":[{"text":"< 3.0.101-108.98.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.0.101-108.98.1","eol":null,"hubHref":null}],"affectedCount":9,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-201914127-1/","label":"www.suse.com/support/update/announcement/2019/suse-su-201914127-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1063416","label":"bugzilla.suse.com/1063416","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1090078","label":"bugzilla.suse.com/1090078","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1102340","label":"bugzilla.suse.com/1102340","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1120758","label":"bugzilla.suse.com/1120758","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1134395","label":"bugzilla.suse.com/1134395","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1134835","label":"bugzilla.suse.com/1134835","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1135650","label":"bugzilla.suse.com/1135650","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1136424","label":"bugzilla.suse.com/1136424","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1137194","label":"bugzilla.suse.com/1137194","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1138943","label":"bugzilla.suse.com/1138943","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1139751","label":"bugzilla.suse.com/1139751","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20836","label":"www.suse.com/security/cve/CVE-2018-20836","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5390","label":"www.suse.com/security/cve/CVE-2018-5390","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12614","label":"www.suse.com/security/cve/CVE-2019-12614","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3459","label":"www.suse.com/security/cve/CVE-2019-3459","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3460","label":"www.suse.com/security/cve/CVE-2019-3460","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3846","label":"www.suse.com/security/cve/CVE-2019-3846","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-3896","label":"www.suse.com/security/cve/CVE-2019-3896","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2018-20836","CVE-2018-5390","CVE-2019-12614","CVE-2019-3459","CVE-2019-3460","CVE-2019-3846","CVE-2019-3896"],"downstream":[],"duplicates":[],"related":["CVE-2018-20836","CVE-2018-5390","CVE-2019-12614","CVE-2019-3459","CVE-2019-3460","CVE-2019-3846","CVE-2019-3896"]},"timeline":[{"kind":"published","date":"2019-07-18T15:53:32.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T02:51:27.503Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T06:02:28.987Z","stale":false,"partial":false}}