Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

SUSE: 2014:0683-1 Important: Kernel Update For Critical Fixes

suse
Calendar Grey May 20, 2014
Scroller Suse
An essential update from SUSE for the Linux kernel addresses three critical security flaws in the Real Time Extension for release 11 SP3.
An update that fixes three vulnerabilities is now An update that fixes three vulnerabilities is now An update that fixes three vulnerabilities is now available

Summary

The SUSE Linux Enterprise 11 Service Pack 3 RealTime Extension kernel has been updated to fix two critical security issues. The following security bugs have been fixed: * CVE-2014-1737: The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree operations and gain privileges by leveraging write access to a /dev/fd device. (bnc#875798) * CVE-2014-1738: The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obtain sensitive information from kernel heap memory by leveraging write access to a

Topics%20covered

Topics Covered

security advisory security issue important system update SUSE Linux Linux kernel

References

#875690 #875798

Cross- CVE-2014-0196 CVE-2014-1737 CVE-2014-1738

Affected Products:

SUSE Linux Enterprise Real Time Extension 11 SP3

https://www.suse.com/security/cve/CVE-2014-0196.html

https://www.suse.com/security/cve/CVE-2014-1737.html

https://www.suse.com/security/cve/CVE-2014-1738.html

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:0683-1
Rating: important

Topics%20covered

Topics Covered

security advisory security issue important system update SUSE Linux Linux kernel

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.