Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 533
Alerts This Week
Warning Icon 1 533

SUSE Live Patch 12 SP1 - Security Update for Kernel DoS and Race Condition

suse
Calendar Grey December 21, 2016
Scroller Suse Esm H88
SUSE Security Announcement for Critical Kernel Live Patch 10 for SLE 15 SP3 tackling significant security flaws.
An update that fixes two vulnerabilities is now available

Summary

This update for the Linux Kernel 3.12.67-60_64_18 fixes several issues. The following security bugs were fixed: - CVE-2016-8655: A race condition in the af_packet packet_set_ring function could be used by local attackers to crash the kernel or gain privileges (bsc#1012759). - CVE-2016-9555: The sctp_sf_ootb function in net/sctp/sm_statefuns.c in the Linux kernel lacks chunk-length checking for the first chunk, which allowed remote attackers to cause a denial of service (out-of-bounds slab access) or possibly have unspecified other impact via crafted SCTP data (bsc#1012183). Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Live Patching 12:

Topics%20covered

Topics Covered

security advisory DoS race condition kernel system update SUSE Linux patch

References

#1012183 #1012759

Cross- CVE-2016-8655 CVE-2016-9555

Affected Products:

SUSE Linux Enterprise Live Patching 12

https://www.suse.com/security/cve/CVE-2016-8655.html

https://www.suse.com/security/cve/CVE-2016-9555.html

https://bugzilla.suse.com/1012183

https://bugzilla.suse.com/1012759

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2016:3205-1
Rating: important

Topics%20covered

Topics Covered

security advisory DoS race condition kernel system update SUSE Linux patch

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.