Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 510
Alerts This Week
Warning Icon 1 510

SUSE: 2023:0812-2 Critical: Kernel Security Flaw & Denial of Service

suse
Calendar Grey May 16, 2014
Scroller Suse
Fedora enhances Security Protocols: Critical patches deployed to address several vulnerabilities, safeguarding user privacy and system stability.
An update that fixes three vulnerabilities is now An update that fixes three vulnerabilities is now An update that fixes three vulnerabilities is now available

Summary

The SUSE Linux Enterprise 11 Service Pack 3 kernel was updated to fix the following severe security issues: * CVE-2014-1737: The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device. (bnc#875798) * CVE-2014-1738: The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a /dev/fd device. (bnc#875798) *

Topics%20covered

Topics Covered

security advisory update privilege escalation DoS patch kernel SUSE

References

#875690 #875798

Cross- CVE-2014-0196 CVE-2014-1737 CVE-2014-1738

Affected Products:

SUSE Linux Enterprise Server 11 SP3 for VMware

SUSE Linux Enterprise Server 11 SP3

SUSE Linux Enterprise High Availability Extension 11 SP3

SUSE Linux Enterprise Desktop 11 SP3

SLE 11 SERVER Unsupported Extras

https://www.suse.com/security/cve/CVE-2014-0196.html

https://www.suse.com/security/cve/CVE-2014-1737.html

https://www.suse.com/security/cve/CVE-2014-1738.html

https://scc.suse.com:443/patches/

https://scc.suse.com:443/patches/

https://scc.suse.com:443/patches/

https://scc.suse.com:443/patches/

https://scc.suse.com:443/patches/

https://scc.suse.com:443/patches/

https://scc.suse.com:443/patches/

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:0667-1
Rating: important

Topics%20covered

Topics Covered

security advisory update privilege escalation DoS patch kernel SUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.