Alerts This Week
Warning Icon 1 664
Alerts This Week
Warning Icon 1 664

SUSE Linux Enterprise 12 SP1: 2017:1290-1 Important Kernel Patch DoS

suse
Calendar Grey May 15, 2017
Dist Suse Esm H88
A significant enhancement for Linux Kernel Live Patch 11 resolves a pair of major security vulnerabilities in SUSE Enterprise 12 SP1.
An update that solves two vulnerabilities and has two fixes An update that solves two vulnerabilities and has two fixes An update that solves two vulnerabilities and has two fixes ...

Summary

This update for the Linux Kernel 3.12.67-60_64_24 fixes several issues. The following security bugs were fixed: - CVE-2017-7308: The packet_set_ring function in net/packet/af_packet.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of service (overflow) or possibly have unspecified other impact via crafted system calls (bsc#1031660). - CVE-2017-7294: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not validate addition of certain levels data, which allowed local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device (bsc#1031440,

References

#1030575 #1031440 #1031481 #1031660

Cross- CVE-2017-7294 CVE-2017-7308

Affected Products:

SUSE Linux Enterprise Live Patching 12

https://www.suse.com/security/cve/CVE-2017-7294.html

https://www.suse.com/security/cve/CVE-2017-7308.html

https://bugzilla.suse.com/1030575

https://bugzilla.suse.com/1031440

https://bugzilla.suse.com/1031481

https://bugzilla.suse.com/1031660

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:1290-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here