Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

SUSE: 2016:1019-1 Important: Linux Kernel Security Patch Details

suse
Calendar Grey April 12, 2016
Scroller Suse
SUSE announced a critical security patch that resolves 10 vulnerabilities while improving the reliability of the Linux Kernel.
An update that solves 9 vulnerabilities and has 70 fixes is An update that solves 9 vulnerabilities and has 70 fixes is An update that solves 9 vulnerabilities and has 70 fixes is ...

Summary

The SUSE Linux Enterprise 12 SP1 kernel was updated to 3.12.57 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2015-8812: A flaw was found in the CXGB3 kernel driver when the network was considered congested. The kernel would incorrectly misinterpret the congestion as an error condition and incorrectly free/clean up the skb. When the device would then send the skb's queued, these structures would be referenced and may panic the system or allow an attacker to escalate privileges in a use-after-free scenario. (bsc#966437) - CVE-2015-8816: A malicious USB device could cause a kernel crash in the USB hub driver. (bnc#968010). - CVE-2016-2143: On zSeries a fork of a large process could have caused memory corruption due to incorrect page table handling. (bnc#970504)

References

#816099 #867251 #875631 #880007 #943645 #944749

#945219 #949752 #955308 #956084 #956852 #957986

#959146 #959257 #959463 #959709 #960174 #960458

#960561 #960629 #961257 #961500 #961516 #961588

#961658 #963193 #963746 #963765 #963827 #963960

#964201 #964730 #965087 #965199 #965830 #965891

#965924 #966026 #966094 #966278 #966437 #966471

#966693 #966831 #966864 #966910 #967047 #967292

#967299 #967650 #967651 #967802 #967903 #968010

#968018 #968074 #968141 #968206 #968230 #968234

#968253 #968448 #968512 #968643 #968670 #969112

#969439 #969571 #969655 #969690 #969735 #969992

#969993 #970062 #970160 #970249 #970909 #971125

#971360

Cross- CVE-2015-8709 CVE-2015-8812 CVE-2015-8816

CVE-2016-2143 CVE-2016-218...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:1019-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.