{"schemaVersion":3,"id":"SUSE-SU-2019:1870-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for the Linux Kernel\n\n\n\nThe SUSE Linux Enterprise 12 SP1 kernel was updated to receive various security and bugfixes.\n\n\nThe following security bugs were fixed:\n\n- CVE-2018-5390 aka 'SegmentSmack': A remote attacker even with relatively low bandwidth could have caused lots of CPU usage\n  by triggering the worst case scenario during IP and/or TCP fragment reassembly (bsc#1102340)\n- CVE-2018-7191: In the tun subsystem in the Linux kernel, dev_get_valid_name was not called before register_netdevice. This allowed local users to cause a denial of service (NULL pointer dereference and panic) via an ioctl(TUNSETIFF) call with a dev name containing a / character. (bnc#1135603)\n- CVE-2018-20836: A race condition in smp_task_timedout() and smp_task_done() in drivers/scsi/libsas/sas_expander.c, could have lead to a use-after-free. (bnc#1134395)\n- CVE-2019-12614: An unchecked kstrdup might have allowed an attacker to cause denial of service (a NULL pointer dereference and system crash). (bnc#1137194)\n- CVE-2019-12818: The nfc_llcp_build_tlv function in net/nfc/llcp_commands.c may have returned NULL. If the caller did not check for this, it would trigger a NULL pointer dereference. This would cause denial of service. (bnc#1138293)\n- CVE-2019-12456: An issue in the MPT3COMMAND case in _ctl_ioctl_main() allowed local users to cause a denial of service or possibly have unspecified other impact by changing the value of ioc_number between two kernel reads of that value, aka a 'double fetch' vulnerability. (bsc#1136922)\n- CVE-2019-11487: An attacker could have triggered use-after-free via page reference count overflow on slow filesystems with at least of 140 GiB of RAM available. (bnc#1133190)\n\nThe following non-security bugs were fixed:\n\n- fuse: Don't access pipe->buffers without pipe_lock() (Prerequisity for CVE-2019-11487, bsc#1133190).\n- fuse: call pipe_buf_release() under pipe lock (Prerequisity for CVE-2019-11487, bsc#1133190).\n- mm: /proc/pid/maps: Check permissions when opening proc pid maps (bsc#1130159).\n- pipe: add pipe_buf_get() helper (Prerequisity for CVE-2019-11487, bsc#1133190).\n- tcp: refine memory limit test in tcp_fragment() after CVE-2019-11478 fix (bsc#1139751).\n- x86/bugs: do not default to IBRS even on SKL (bsc#1112824).","dates":{"published":"2019-07-17T12:57:10.000Z","modified":"2026-02-04T02:55:53.680Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"kernel-default&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","name":"kernel-default","label":"kernel-default&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-default&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 3.12.74-60.64.118.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.74-60.64.118.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-default&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","name":"kernel-default","label":"kernel-default&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-default&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","purlType":"rpm","versions":[{"text":"< 3.12.74-60.64.118.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.74-60.64.118.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-ec2&distro=SUSE Linux Enterprise Module for Public Cloud 12","name":"kernel-ec2","label":"kernel-ec2&distro=SUSE Linux Enterprise Module for Public Cloud 12","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-ec2&distro=SUSE Linux Enterprise Module for Public Cloud 12","purlType":"rpm","versions":[{"text":"< 3.12.74-60.64.118.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.74-60.64.118.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-source&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","name":"kernel-source","label":"kernel-source&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-source&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 3.12.74-60.64.118.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.74-60.64.118.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-source&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","name":"kernel-source","label":"kernel-source&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-source&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","purlType":"rpm","versions":[{"text":"< 3.12.74-60.64.118.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.74-60.64.118.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-syms&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","name":"kernel-syms","label":"kernel-syms&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-syms&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 3.12.74-60.64.118.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.74-60.64.118.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-syms&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","name":"kernel-syms","label":"kernel-syms&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-syms&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","purlType":"rpm","versions":[{"text":"< 3.12.74-60.64.118.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.74-60.64.118.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-xen&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","name":"kernel-xen","label":"kernel-xen&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-xen&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 3.12.74-60.64.118.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.74-60.64.118.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kernel-xen&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","name":"kernel-xen","label":"kernel-xen&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kernel-xen&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","purlType":"rpm","versions":[{"text":"< 3.12.74-60.64.118.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.12.74-60.64.118.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kgraft-patch-SLE12-SP1_Update_35&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","name":"kgraft-patch-SLE12-SP1_Update_35","label":"kgraft-patch-SLE12-SP1_Update_35&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kgraft-patch-SLE12-SP1_Update_35&distro=SUSE Linux Enterprise Server 12 SP1-LTSS","purlType":"rpm","versions":[{"text":"< 1-2.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1-2.3.1","eol":null,"hubHref":null},{"vendor":"suse","product":"kgraft-patch-SLE12-SP1_Update_35&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","name":"kgraft-patch-SLE12-SP1_Update_35","label":"kgraft-patch-SLE12-SP1_Update_35&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/kgraft-patch-SLE12-SP1_Update_35&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1","purlType":"rpm","versions":[{"text":"< 1-2.3.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1-2.3.1","eol":null,"hubHref":null}],"affectedCount":11,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20191870-1/","label":"www.suse.com/support/update/announcement/2019/suse-su-20191870-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/1102340","label":"bugzilla.suse.com/1102340","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1112824","label":"bugzilla.suse.com/1112824","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1130159","label":"bugzilla.suse.com/1130159","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1133190","label":"bugzilla.suse.com/1133190","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1134395","label":"bugzilla.suse.com/1134395","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1135603","label":"bugzilla.suse.com/1135603","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1136922","label":"bugzilla.suse.com/1136922","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1137194","label":"bugzilla.suse.com/1137194","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1138293","label":"bugzilla.suse.com/1138293","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/1139751","label":"bugzilla.suse.com/1139751","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2018-20836","label":"www.suse.com/security/cve/CVE-2018-20836","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-5390","label":"www.suse.com/security/cve/CVE-2018-5390","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2018-7191","label":"www.suse.com/security/cve/CVE-2018-7191","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-11487","label":"www.suse.com/security/cve/CVE-2019-11487","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12456","label":"www.suse.com/security/cve/CVE-2019-12456","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12614","label":"www.suse.com/security/cve/CVE-2019-12614","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2019-12818","label":"www.suse.com/security/cve/CVE-2019-12818","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2018-20836","CVE-2018-5390","CVE-2018-7191","CVE-2019-11487","CVE-2019-12456","CVE-2019-12614","CVE-2019-12818"],"downstream":[],"duplicates":[],"related":["CVE-2018-20836","CVE-2018-5390","CVE-2018-7191","CVE-2019-11487","CVE-2019-12456","CVE-2019-12614","CVE-2019-12818"]},"timeline":[{"kind":"published","date":"2019-07-17T12:57:10.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T02:55:53.680Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T12:38:48.861Z","stale":false,"partial":false}}