Alerts This Week
Warning Icon 1 666
Alerts This Week
Warning Icon 1 666

SUSE: 2017:1064-1 Critical: Linux Kernel Live Patch 5 Denial of Service

suse
Calendar Grey April 19, 2017
Dist Suse Esm H88
Important security enhancement for SUSE Linux Kernel Live Patch 5 tackling two major vulnerabilities for SLE 12 SP1.
An update that solves two vulnerabilities and has three An update that solves two vulnerabilities and has three An update that solves two vulnerabilities and has three fixes is now...

Summary

This update for the Linux Kernel 3.12.59-60_41 fixes several issues. The following security bugs were fixed: - CVE-2017-7308: The packet_set_ring function in net/packet/af_packet.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of service (overflow) or possibly have unspecified other impact via crafted system calls (bsc#1030575, bsc#1031660). - CVE-2017-7294: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not validate addition of certain levels data, which allowed local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a

References

#1030467 #1030575 #1031440 #1031481 #1031660

Cross- CVE-2017-7294 CVE-2017-7308

Affected Products:

SUSE Linux Enterprise Live Patching 12

https://www.suse.com/security/cve/CVE-2017-7294.html

https://www.suse.com/security/cve/CVE-2017-7308.html

https://bugzilla.suse.com/1030467

https://bugzilla.suse.com/1030575

https://bugzilla.suse.com/1031440

https://bugzilla.suse.com/1031481

https://bugzilla.suse.com/1031660

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:1064-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here