Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

SUSE: 2021:0453-2 Critical: Operating System Security Vulnerability

suse
Calendar Grey June 24, 2014
Scroller Suse
Important SUSE Linux Kernel patch resolves CVE-2014-3154, necessitating urgent system updates.
An update that fixes one vulnerability is now available

Summary

The SUSE Linux Enterprise 11 Service Pack 2 LTSS kernel was updated to fix a critical security issue: * CVE-2014-3153: The futex acquisition code in kernel/futex.c can be used to gain ring0 access via the futex syscall. This could be used for privilege escalation by non-root users. (bnc#880892) Security Issue reference: * CVE-2014-3153 Indications: Everyone using the Linux Kernel on x86_64 architecture should update.

Topics%20covered

Topics Covered

security advisory critical privilege escalation kernel fix SUSE

References

#880892

Cross- CVE-2014-3153

Affected Products:

SUSE Linux Enterprise Server 11 SP2 LTSS

SLE 11 SERVER Unsupported Extras

https://www.suse.com/security/cve/CVE-2014-3153.html

https://scc.suse.com:443/patches/

https://scc.suse.com:443/patches/

https://scc.suse.com:443/patches/

https://scc.suse.com:443/patches/

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2014:0837-1
Rating: important

Topics%20covered

Topics Covered

security advisory critical privilege escalation kernel fix SUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.