Alerts This Week
Warning Icon 1 541
Alerts This Week
Warning Icon 1 541

SUSE Linux: 2017:1294-1 Important: Kernel Live Patch Denial of Service

suse
Calendar Grey May 15, 2017
Dist Suse Esm H88
Crucial update for SUSE Linux Kernel Live Patch 12 addresses two vulnerabilities affecting SLE 12 SP1 environments.
An update that solves two vulnerabilities and has two fixes An update that solves two vulnerabilities and has two fixes An update that solves two vulnerabilities and has two fixes ...

Summary

This update for the Linux Kernel 3.12.69-60_64_29 fixes several issues. The following security bugs were fixed: - CVE-2017-7308: The packet_set_ring function in net/packet/af_packet.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of service (overflow) or possibly have unspecified other impact via crafted system calls (bsc#1031660). - CVE-2017-7294: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not validate addition of certain levels data, which allowed local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device (bsc#1031440,

References

#1030575 #1031440 #1031481 #1031660

Cross- CVE-2017-7294 CVE-2017-7308

Affected Products:

SUSE Linux Enterprise Live Patching 12

https://www.suse.com/security/cve/CVE-2017-7294.html

https://www.suse.com/security/cve/CVE-2017-7308.html

https://bugzilla.suse.com/1030575

https://bugzilla.suse.com/1031440

https://bugzilla.suse.com/1031481

https://bugzilla.suse.com/1031660

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:1294-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here