Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 550
Alerts This Week
Warning Icon 1 550

SUSE 12 SP5: SUSE-SU-2020:0453-3 High: Kernel Vulnerability Exploit

suse
Calendar Grey June 14, 2014
Scroller Suse
Important Arch Linux patch addresses user permission vulnerabilities in system Kernel. Users of Real-time Updates are urged to apply the fix.
An update that fixes one vulnerability is now available

Summary

The SUSE Linux Enterprise 11 Service Pack 3 RealTime Extension kernel was updated to fix a critical privilege escalation security issue: * CVE-2014-3153: The futex acquisition code in kernel/futex.c can be used to gain ring0 access via the futex syscall. This could be used for privilege escalation by non-root users. (bnc#880892) Security Issue reference: * CVE-2014-3153 Indications: Everyone using the Real Time Linux Kernel on x86_64 architecture should update.

Topics%20covered

Topics Covered

security advisory critical privilege escalation kernel SUSE Linux Real Time Extension

References

#880892

Cross- CVE-2014-3153

Affected Products:

SUSE Linux Enterprise Real Time Extension 11 SP3

https://www.suse.com/security/cve/CVE-2014-3153.html

https://scc.suse.com:443/patches/

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:0796-1
Rating: important

Topics%20covered

Topics Covered

security advisory critical privilege escalation kernel SUSE Linux Real Time Extension

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.