Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

SUSE: 2016:1937-1 Important: Linux Kernel Denial of Service Issues Fixed

suse
Calendar Grey August 2, 2016
Scroller Suse
SUSE has released a crucial update for the Linux Kernel, tackling 24 vulnerabilities along with 76 corrective measures that carry significant security ramifications.
An update that solves 24 vulnerabilities and has 76 fixes An update that solves 24 vulnerabilities and has 76 fixes An update that solves 24 vulnerabilities and has 76 fixes is now...

Summary

The SUSE Linux Enterprise 12 SP1 RT kernel was updated to 3.12.61 to receive various security and bugfixes. Main feature additions: - Improved support for Clustered File System (CephFS, fate#318586). The following security bugs were fixed: - CVE-2014-9717: fs/namespace.c in the Linux kernel processes MNT_DETACH umount2 system calls without verifying that the MNT_LOCKED flag is unset, which allowed local users to bypass intended access restrictions and navigate to filesystem locations beneath a mount by calling umount2 within a user namespace (bnc#928547). - CVE-2014-9904: The snd_compress_check_input function in sound/core/compress_offload.c in the ALSA subsystem in the Linux kernel did not properly check for an integer overflow, which allowed local

References

#662458 #676471 #897662 #928547 #944309 #945345

#947337 #950998 #951844 #953048 #953233 #954847

#956491 #957805 #957986 #957990 #958390 #958463

#960857 #962742 #962846 #963762 #964727 #965087

#966245 #967640 #968667 #969016 #970114 #970506

#970604 #970609 #970948 #971049 #971770 #971947

#972124 #972933 #973378 #973499 #973570 #974165

#974308 #974620 #974646 #974692 #975533 #975772

#975788 #976739 #976821 #976868 #977417 #977582

#977685 #978401 #978469 #978527 #978822 #979169

#979213 #979347 #979419 #979485 #979489 #979521

#979548 #979867 #979879 #979922 #980246 #980348

#980371 #980706 #981038 #981143 #981344 #982282

#982354 #982544 #982698 #983143 #983213 #983318

#983394 #983721 #983904 #983977 #984...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:1937-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.