Alerts This Week
Warning Icon 1 560
Alerts This Week
Warning Icon 1 560

SUSE: 2016:2014-1 Important: Linux Kernel Update Denial of Service Fix

suse
Calendar Grey August 9, 2016
Dist Suse Esm H88
Crucial SUSE upgrade addressing various vulnerabilities in Kernel Live Patch 7 for SLE 12, averting potential denial of service.
An update that solves 8 vulnerabilities and has one errata An update that solves 8 vulnerabilities and has one errata An update that solves 8 vulnerabilities and has one errata is ...

Summary

This update for the Linux Kernel 3.12.44-52_18 fixes several issues. The following security bugs were fixed: - CVE-2016-4470: The key_reject_and_link function in security/keys/key.c in the Linux kernel did not ensure that a certain data structure is initialized, which allowed local users to cause a denial of service (system crash) via vectors involving a crafted keyctl request2 command (bsc#984764). - CVE-2016-1583: The ecryptfs_privileged_open function in fs/ecryptfs/kthread.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (stack memory consumption) via vectors involving crafted mmap calls for /proc pathnames, leading to recursive pagefault handling (bsc#983144). - CVE-2016-4565: The InfiniBand (aka IB) stack in the Linux kernel

Topics%20covered

Topics Covered

security advisory denial of service security issue kernel update SUSE Linux important update system patching

References

#955837 #971793 #973570 #979064 #979074 #980856

#980883 #983144 #984764

Cross- CVE-2013-7446 CVE-2015-8816 CVE-2016-0758

CVE-2016-1583 CVE-2016-2053 CVE-2016-3134

CVE-2016-4470 CVE-2016-4565

Affected Products:

SUSE Linux Enterprise Server for SAP 12

SUSE Linux Enterprise Server 12-LTSS

https://www.suse.com/security/cve/CVE-2013-7446.html

https://www.suse.com/security/cve/CVE-2015-8816.html

https://www.suse.com/security/cve/CVE-2016-0758.html

https://www.suse.com/security/cve/CVE-2016-1583.html

https://www.suse.com/security/cve/CVE-2016-2053.html

https://www.suse.com/security/cve/CVE-2016-3134.html

https://www.suse.com/security/cve/CVE-2016-4470.html

https://www.suse.com/security/cve/CVE-2016-4565.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:2014-1
Rating: important

Topics%20covered

Topics Covered

security advisory denial of service security issue kernel update SUSE Linux important update system patching

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here