Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

SUSE: 2016:1994-1 Important: Multiple DoS Security Issues Resolved

suse
Calendar Grey August 9, 2016
Dist Suse Esm H88
Revise details around 9 essential aspects of the Linux Kernel Live Patch specific to SLE 12 SP1, aimed at boosting both system resilience and security protocols.
An update that fixes 9 vulnerabilities is now available

Summary

This update for the Linux Kernel 3.12.51-60_20 fixes the several issues. These security issues were fixed: - CVE-2016-4470: The key_reject_and_link function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command (bsc#984764). - CVE-2016-1583: The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling (bsc#983144). - CVE-2016-4565: The InfiniBand (aka IB) stack in the Linux kernel

References

#971793 #973570 #979064 #979074 #979078 #980856

#980883 #983144 #984764

Cross- CVE-2013-7446 CVE-2015-8019 CVE-2015-8816

CVE-2016-0758 CVE-2016-1583 CVE-2016-2053

CVE-2016-3134 CVE-2016-4470 CVE-2016-4565

Affected Products:

SUSE Linux Enterprise Live Patching 12

https://www.suse.com/security/cve/CVE-2013-7446.html

https://www.suse.com/security/cve/CVE-2015-8019.html

https://www.suse.com/security/cve/CVE-2015-8816.html

https://www.suse.com/security/cve/CVE-2016-0758.html

https://www.suse.com/security/cve/CVE-2016-1583.html

https://www.suse.com/security/cve/CVE-2016-2053.html

https://www.suse.com/security/cve/CVE-2016-3134.html

https://www.suse.com/security/cve/CVE-2016-4470.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:1994-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here