Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges

Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

SUSE Linux Enterprise Server 12 Critical: Live Patch 10 DoS Fix

suse
Calendar Grey August 9, 2016
Scroller Suse
Explore Kernel Live Patch Version 10 tailored for SLE 12, emphasizing enhancements in security by addressing critical vulnerabilities.
An update that solves 8 vulnerabilities and has one errata An update that solves 8 vulnerabilities and has one errata An update that solves 8 vulnerabilities and has one errata is ...

Summary

This update for the Linux Kernel 3.12.51-52_34 fixes several issues. The following security bugs were fixed: - CVE-2016-4470: The key_reject_and_link function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command (bsc#984764). - CVE-2016-1583: The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling (bsc#983144). - CVE-2016-4565: The InfiniBand (aka IB) stack in the Linux kernel

Topics%20covered

Topics Covered

security advisory DoS important system update SUSE Linux Linux Kernel live patch

References

#955837 #971793 #973570 #979064 #979074 #980856

#980883 #983144 #984764

Cross- CVE-2013-7446 CVE-2015-8816 CVE-2016-0758

CVE-2016-1583 CVE-2016-2053 CVE-2016-3134

CVE-2016-4470 CVE-2016-4565

Affected Products:

SUSE Linux Enterprise Server for SAP 12

SUSE Linux Enterprise Server 12-LTSS

https://www.suse.com/security/cve/CVE-2013-7446.html

https://www.suse.com/security/cve/CVE-2015-8816.html

https://www.suse.com/security/cve/CVE-2016-0758.html

https://www.suse.com/security/cve/CVE-2016-1583.html

https://www.suse.com/security/cve/CVE-2016-2053.html

https://www.suse.com/security/cve/CVE-2016-3134.html

https://www.suse.com/security/cve/CVE-2016-4470.html

https://www.suse.com/security/cve/CVE-2016-4565.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:2002-1
Rating: important

Topics%20covered

Topics Covered

security advisory DoS important system update SUSE Linux Linux Kernel live patch

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.