Alerts This Week
Warning Icon 1 637
Alerts This Week
Warning Icon 1 637

SUSE 12 SP1: 2016:2007-1 Important: 8 Kernel Issues Fixed

suse
Calendar Grey August 9, 2016
Dist Suse Esm H88
A significant update from SUSE addresses 10 vulnerabilities in Linux Kernel Live Patch 4 for SLE 15 SP2.
An update that fixes 8 vulnerabilities is now available

Summary

This update for the Linux Kernel 3.12.53-60_30 fixes the several issues. These security issues were fixed: - CVE-2016-4470: The key_reject_and_link function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command (bsc#984764). - CVE-2016-1583: The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling (bsc#983144). - CVE-2016-4565: The InfiniBand (aka IB) stack in the Linux kernel

References

#971793 #973570 #979064 #979074 #980856 #980883

#983144 #984764

Cross- CVE-2013-7446 CVE-2015-8816 CVE-2016-0758

CVE-2016-1583 CVE-2016-2053 CVE-2016-3134

CVE-2016-4470 CVE-2016-4565

Affected Products:

SUSE Linux Enterprise Live Patching 12

https://www.suse.com/security/cve/CVE-2013-7446.html

https://www.suse.com/security/cve/CVE-2015-8816.html

https://www.suse.com/security/cve/CVE-2016-0758.html

https://www.suse.com/security/cve/CVE-2016-1583.html

https://www.suse.com/security/cve/CVE-2016-2053.html

https://www.suse.com/security/cve/CVE-2016-3134.html

https://www.suse.com/security/cve/CVE-2016-4470.html

https://www.suse.com/security/cve/CVE-2016-4565.html

https://bugzilla.suse.com/971793

https://bugzilla.suse.com/973570

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:2007-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here