Alerts This Week
Warning Icon 1 684
Alerts This Week
Warning Icon 1 684

SUSE: 2017:2791-1 Important: Kernel Live Patch Denial of Service Issues

suse
Calendar Grey October 20, 2017
Dist Suse Esm H88
SUSE Security Patch: Critical kernel update for SLE 12 SP1 resolves various vulnerabilities and improves overall system performance.
An update that solves four vulnerabilities and has one An update that solves four vulnerabilities and has one An update that solves four vulnerabilities and has one errata is now a...

Summary

This update for the Linux Kernel 3.12.74-60_64_60 fixes several issues. The following security bugs were fixed: - CVE-2017-15274: security/keys/keyctl.c in the Linux kernel did not consider the case of a NULL payload in conjunction with a nonzero length value, which allowed local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call (bsc#1045327). - CVE-2017-1000112: Updated patch for this issue to be in sync with the other livepatches. Description of the issue: Prevent race condition in net-packet code that could have been exploited by unprivileged users to gain root access (bsc#1052368, bsc#1052311). - CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c was too late in checking whether an overwrite of an skb data structure

References

#1038564 #1042892 #1045327 #1052311 #1052368

Cross- CVE-2017-1000112 CVE-2017-15274 CVE-2017-8890

CVE-2017-9242

Affected Products:

SUSE Linux Enterprise Server for SAP 12-SP1

SUSE Linux Enterprise Server 12-SP1-LTSS

https://www.suse.com/security/cve/CVE-2017-1000112.html

https://www.suse.com/security/cve/CVE-2017-15274.html

https://www.suse.com/security/cve/CVE-2017-8890.html

https://www.suse.com/security/cve/CVE-2017-9242.html

https://bugzilla.suse.com/1038564

https://bugzilla.suse.com/1042892

https://bugzilla.suse.com/1045327

https://bugzilla.suse.com/1052311

https://bugzilla.suse.com/1052368

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:2791-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here