Alerts This Week
Warning Icon 1 664
Alerts This Week
Warning Icon 1 664

SUSE: 2017:2801-1 important: Kernel Live Patch Security Bugs

suse
Calendar Grey October 20, 2017
Dist Suse Esm H88
Patch updates are essential for fixing significant vulnerabilities in Linux Kernel 0 intended for SLE 12 SP2, ensuring enhanced security measures.
An update that fixes three vulnerabilities is now available

Summary

This update for the Linux Kernel 4.4.21-69 fixes several issues. The following security bugs were fixed: - CVE-2017-15274: security/keys/keyctl.c in the Linux kernel did not consider the case of a NULL payload in conjunction with a nonzero length value, which allowed local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call (bsc#1062471). - CVE-2017-1000251: The native Bluetooth stack in the Linux Kernel (BlueZ) was vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space (bsc#1057950). - CVE-2017-12762: In drivers/isdn/i4l/isdn_net.c a user-controlled buffer was copied into a local buffer of constant size using strcpy without a

References

#1053150 #1057950 #1062471

Cross- CVE-2017-1000251 CVE-2017-12762 CVE-2017-15274

Affected Products:

SUSE Linux Enterprise Live Patching 12

https://www.suse.com/security/cve/CVE-2017-1000251.html

https://www.suse.com/security/cve/CVE-2017-12762.html

https://www.suse.com/security/cve/CVE-2017-15274.html

https://bugzilla.suse.com/1053150

https://bugzilla.suse.com/1057950

https://bugzilla.suse.com/1062471

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2017:2801-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here