SUSE-SU-2018:2394-1 | Mondoo Vulnerability Intelligence

SUSE-SU-2018:2394-1

MEDIUM5.6

Security update for kgraft

Published Aug 16, 2018

Modified 7 years ago

Fix available

Details

Description of the patch:

This update for kgraft fixes the following issues:

Add script for disabling SMT to help with the mitigation of the 'L1 Terminal Fault' issue (CVE-2018-3646 bsc#1099306)

The script is called 'klp-kvm-l1tf-ctrl-smt' and is used for enabling or disabling SMT to mitigate the issue when this administrative decision is taken.

Disabling SMT:

klp-kvm-l1tf-ctrl-smt -d

Enabling SMT:

klp-kvm-l1tf-ctrl-smt -e

Affected Packages

kgraft

SUSE Linux Enterprise Live Patching 12SUSE Linux Enterprise Live Patching 12 SP3

Fixed in:

1.0-23.9.1

kgraft-devel

SUSE Linux Enterprise Live Patching 12

Fixed in:

1.0-23.9.1

References

ADVISORY

https://bugzilla.suse.com/1099306

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2018-August/004460.html

ADVISORY

https://www.suse.com/security/cve/CVE-2018-3646/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2018/suse-su-20182394-1/

CVSS Analysis

CVSS v3.0

5.6

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

HighAC:H

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

ChangedS:C

Impact

Confidentiality

HighC:H

Integrity

NoneI:N

Availability

NoneA:N

5.6/CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Upstream

CVE-2018-3646

Ecosystems

SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Live Patching 12 SP3

Timeline

PublishedAug 16, 2018

ModifiedAug 16, 2018