SUSE: 2018:1173-1 Important: Linux Kernel DoS and Code Execution Fixes
suse
May 9, 2018
An update that solves 9 vulnerabilities and has 27 fixes is now available.
Summary
The SUSE Linux Enterprise 12 SP2 LTSS kernel was updated to 4.4.121 to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-8781: The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c had an integer-overflow vulnerability that allowed local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space (bnc#1090643). - CVE-2018-10124: The kill_something_info function in kernel/signal.c might have allowed local users to cause a denial of service via an INT_MIN argument (bnc#1089752). - CVE-2018-10087: The kernel_wait4 function in kernel/exit.c might have allowed local users to cause a denial of service by triggering an attempted use of the -INT_MIN value (bnc#1089608).
References
#1012382 #1031717 #1046610 #1057734 #1070536
#1075428 #1076847 #1077560 #1082153 #1082299
#1083125 #1083745 #1083836 #1084353 #1084610
#1084721 #1084829 #1085042 #1085185 #1085224
#1085402 #1085404 #1086162 #1086194 #1087088
#1087260 #1087845 #1088241 #1088242 #1088600
#1088684 #1089198 #1089608 #1089644 #1089752
#1090643
Cross- CVE-2017-18257 CVE-2018-10087 CVE-2018-10124
CVE-2018-1087 CVE-2018-7740 CVE-2018-8043
CVE-2018-8781 CVE-2018-8822 CVE-2018-8897
Affected Products:
SUSE OpenStack Cloud 7
SUSE Linux Enterprise Server for SAP 12-SP2
SUSE Linux Enterprise Server 12-SP2-LTSS
SUSE Enterprise Storage 4
OpenStack Cloud Magnum Orchestration 7
https://www.suse.com/security/cve/CVE-201...
Read the Full Advisory
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2018:1173-1
Rating: important
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!