Alerts This Week
Warning Icon 1 659
Alerts This Week
Warning Icon 1 659

SUSE: 2016:2001-1 Important: Kernel Live Patch Issues Resolved

suse
Calendar Grey August 9, 2016
Dist Suse Esm H88
SUSE has released Kernel Live Patch 13 for SLE 12, resolving 7 security flaws, with significant improvements to safeguard the system.
An update that solves 7 vulnerabilities and has one errata An update that solves 7 vulnerabilities and has one errata An update that solves 7 vulnerabilities and has one errata is ...

Summary

This update for the Linux Kernel 3.12.55-52_45 fixes several issues. The following security bugs were fixed: - CVE-2016-4470: The key_reject_and_link function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command (bsc#984764). - CVE-2016-4565: The InfiniBand (aka IB) stack in the Linux kernel incorrectly relied on the write system call, which allowed local users to cause a denial of service (kernel memory write operation) or possibly have unspecified other impact via a uAPI interface (bsc#980883). - CVE-2016-0758: Integer overflow in lib/asn1_decoder.c in the Linux kernel allowed local users to gain privileges via crafted ASN.1 data

Topics%20covered

Topics Covered

security advisory denial of service kernel patch important suse system crash local users

References

#955837 #971793 #973570 #979064 #979074 #980856

#980883 #984764

Cross- CVE-2013-7446 CVE-2015-8816 CVE-2016-0758

CVE-2016-2053 CVE-2016-3134 CVE-2016-4470

CVE-2016-4565

Affected Products:

SUSE Linux Enterprise Server for SAP 12

SUSE Linux Enterprise Server 12-LTSS

https://www.suse.com/security/cve/CVE-2013-7446.html

https://www.suse.com/security/cve/CVE-2015-8816.html

https://www.suse.com/security/cve/CVE-2016-0758.html

https://www.suse.com/security/cve/CVE-2016-2053.html

https://www.suse.com/security/cve/CVE-2016-3134.html

https://www.suse.com/security/cve/CVE-2016-4470.html

https://www.suse.com/security/cve/CVE-2016-4565.html

https://bugzilla.suse.com/955837

https://bugzilla.suse.com/971793

https://bugzilla.suse.com/973570

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:2001-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service kernel patch important suse system crash local users

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here