SUSE-SU-2018:0509-1

Dashboard / Vulnerabilities / SUSE-SU-2018:0509-1

SUSE-SU-2018:0509-1

Summary: Security update for drm

Details: This update for drm provides the following fixes: This security issue was fixed: - CVE-2017-10810: Memory leak in the virtio_gpu_object_create function in drivers/gpu/drm/virtio/virtgpu_object.c allowed attackers to cause a denial of service (memory consumption) by triggering object-initialization failures (bnc#1047277) These non-security issues were fixed: - Backport upstream 4.9.x stable fixes up to 4.9.81 (bsc#1041744). - Fixed crash at suspend/resume on old Intel chipsets (bsc#1047729, bsc#1050256) - Fixed large topology support for vmwgfx (bsc#1048155) - Workaround for BXT aperture vs GTT chip bug (bsc#1046821) - Limit the supplements for the default hardware support to only Intel Skylake / Kabylake and AMDGPU (bsc#1077885) 4.9.x i915 seems more buggy than expected for old chipsets. - Conditionally build aarch64 as well (bsc#1066175) - Build host1x module (taken from the kernel-source) as well for avoiding the unneeded dependency on kernel-default-extra on ARM64 (bsc#1066175) - Enable AMDGPU CIK and SI (bsc#1066175): - Add missing hisilicon hibmc driver (bsc#1066175): - Add si_support and cik_support options to radeon and amdgpu (bsc#1066175): - Update Module.supported and apply it properly; following SLE12-SP3 kernel status - Backport the upstream DP-MST fixes, addressing a hang at S3 resume (bsc#1055493):

References: https://www.suse.com/support/update/announcement/2018/suse-su-20180509-1/, https://bugzilla.suse.com/1041744, https://bugzilla.suse.com/1046821, https://bugzilla.suse.com/1047277, https://bugzilla.suse.com/1047729, https://bugzilla.suse.com/1048155, https://bugzilla.suse.com/1050256, https://bugzilla.suse.com/1055493, https://bugzilla.suse.com/1066175, https://bugzilla.suse.com/1077885, https://www.suse.com/security/cve/CVE-2017-10810