Alerts This Week
Warning Icon 1 659
Alerts This Week
Warning Icon 1 659

SUSE 11-SP4: 2017:0912-1 Important: Local Escalation in Kernel

suse
Calendar Grey April 3, 2017
Dist Suse Esm H88
SUSE issues critical kernel update addressing local elevation of privileges, complete with fixes and guidance.
An update that fixes one vulnerability is now available

Summary

The SUSE Linux Enterprise 11 SP4 kernel was updated to fix the following security bug: CVE-2017-2636: A race condition in the n_hdlc tty Linux kernel driver (drivers/tty/n_hdlc.c) could have been exploited to gain a local privilege escalation (bnc#1027565) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 11-SP4: zypper in -t patch sdksp4-kernel-13047=1 - SUSE Linux Enterprise Server 11-SP4: zypper in -t patch slessp4-kernel-13047=1 - SUSE Linux Enterprise Server 11-EXTRA: zypper in -t patch slexsp3-kernel-13047=1 - SUSE Linux Enterprise Debuginfo 11-SP4: zypper in -t patch dbgsp4-kernel-13047=1 To bring your system up-to-date, use "zypper patch". Package List:

References

#1027565

Cross- CVE-2017-2636

Affected Products:

SUSE Linux Enterprise Software Development Kit 11-SP4

SUSE Linux Enterprise Server 11-SP4

SUSE Linux Enterprise Server 11-EXTRA

SUSE Linux Enterprise Debuginfo 11-SP4

https://www.suse.com/security/cve/CVE-2017-2636.html

https://bugzilla.suse.com/1027565

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:0912-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here