Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

SUSE: 2013:1474-1 Critical: Linux Kernel Security Issues Update

suse
Calendar Grey September 21, 2013
Scroller Suse
The recent SUSE Security Patch tackles 12 vulnerabilities in the Linux core, improving both reliability and protection.
An update that solves 12 vulnerabilities and has 59 fixes An update that solves 12 vulnerabilities and has 59 fixes An update that solves 12 vulnerabilities and has 59 fixes is now...

Summary

The SUSE Linux Enterprise 11 Service Pack 2 kernel has been updated to version 3.0.93 and includes various bug and security fixes. The following security bugs have been fixed: * CVE-2013-2148: The fill_event_metadata function in fs/notify/fanotify/fanotify_user.c in the Linux kernel did not initialize a certain structure member, which allowed local users to obtain sensitive information from kernel memory via a read operation on the fanotify descriptor. * CVE-2013-2237: The key_notify_policy_flush function in net/key/af_key.c in the Linux kernel did not initialize a certain structure member, which allowed local users to obtain sensitive information from kernel heap memory by reading a broadcast message from the notify_policy interface of an IPSec key_socket. *

Topics%20covered

Topics Covered

security advisory security issue important information exposure SUSE system crash linux kernel

References

#745640 #760407 #765523 #773006 #773255 #773837

#783475 #785901 #789010 #801427 #803320 #804482

#805371 #806396 #806976 #807471 #807502 #808940

#809122 #812526 #812974 #813604 #813733 #814336

#815320 #816043 #817035 #817377 #818465 #819363

#819523 #820172 #820434 #821052 #821235 #822066

#822077 #822575 #822825 #823082 #823342 #823497

#823517 #824159 #824295 #824915 #825048 #825142

#825227 #825591 #825657 #825887 #826350 #826960

#827372 #827376 #827378 #827749 #827750 #828119

#828192 #828574 #828714 #829082 #829357 #829622

#830901 #831055 #831058 #831410 #831949

Cross- CVE-2013-1059 CVE-2013-1774 CVE-2013-1819

CVE-2013-1929 CVE-2013-2148 CVE-2013-2164

CVE-2013-2232 CVE-2013-2234 CVE-2013-2237

CVE-2013...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2013:1474-1
Rating: important

Topics%20covered

Topics Covered

security advisory security issue important information exposure SUSE system crash linux kernel

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.