Alerts This Week
Warning Icon 1 609
Alerts This Week
Warning Icon 1 609

SUSE 15: 2020:1234-5 High: Critical Bugfix Addresses Security Hole

suse
Calendar Grey August 9, 2016
Dist Suse Esm H88
SUSE Security Update for Linux Kernel Live Patch 8 aims to resolve significant system reliability concerns while concurrently bolstering security measures.
An update that solves 9 vulnerabilities and has one errata An update that solves 9 vulnerabilities and has one errata An update that solves 9 vulnerabilities and has one errata is ...

Summary

This update for the Linux Kernel 3.12.48-52_27 fixes several issues. The following security bugs were fixed: - CVE-2016-4470: The key_reject_and_link function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command (bsc#984764). - CVE-2016-1583: The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling (bsc#983144). - CVE-2016-4565: The InfiniBand (aka IB) stack in the Linux kernel

Topics%20covered

Topics Covered

security advisory denial of service critical kernel patch SUSE issue report

References

#955837 #971793 #973570 #979064 #979074 #979078

#980856 #980883 #983144 #984764

Cross- CVE-2013-7446 CVE-2015-8019 CVE-2015-8816

CVE-2016-0758 CVE-2016-1583 CVE-2016-2053

CVE-2016-3134 CVE-2016-4470 CVE-2016-4565

Affected Products:

SUSE Linux Enterprise Server for SAP 12

SUSE Linux Enterprise Server 12-LTSS

https://www.suse.com/security/cve/CVE-2013-7446.html

https://www.suse.com/security/cve/CVE-2015-8019.html

https://www.suse.com/security/cve/CVE-2015-8816.html

https://www.suse.com/security/cve/CVE-2016-0758.html

https://www.suse.com/security/cve/CVE-2016-1583.html

https://www.suse.com/security/cve/CVE-2016-2053.html

https://www.suse.com/security/cve/CVE-2016-3134.html

https://www.suse.com/security/cve/CVE-2016-4470.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:2005-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service critical kernel patch SUSE issue report

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here