SUSE Linux Enterprise 12-LTSS 2018-1221-1 Critical: Kernel Update
suse
May 11, 2018
An update that solves 11 vulnerabilities and has 5 fixes is now available.
Summary
The SUSE Linux Enterprise 12 GA LTSS kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-1087: And an unprivileged KVM guest user could use this flaw to potentially escalate their privileges inside a guest. (bsc#1087088) - CVE-2018-8897: An unprivileged system user could use incorrect set up interrupt stacks to crash the Linux kernel resulting in DoS issue. (bsc#1087088) - CVE-2018-8781: The udl_fb_mmap function in drivers/gpu/drm/udl/udl_fb.c had an integer-overflow vulnerability allowing local users with access to the udldrmfb driver to obtain full read and write permissions on kernel physical pages, resulting in a code execution in kernel space (bnc#1090643). - CVE-2018-10124: The kill_something_info function in kernel/signal.c
References
#1076537 #1082299 #1083125 #1083242 #1084536
#1085331 #1086162 #1087088 #1087209 #1087260
#1088147 #1088260 #1088261 #1089608 #1089752
#1090643
Cross- CVE-2017-0861 CVE-2017-11089 CVE-2017-13220
CVE-2017-18203 CVE-2018-10087 CVE-2018-10124
CVE-2018-1087 CVE-2018-7757 CVE-2018-8781
CVE-2018-8822 CVE-2018-8897
Affected Products:
SUSE Linux Enterprise Server 12-LTSS
SUSE Linux Enterprise Module for Public Cloud 12
https://www.suse.com/security/cve/CVE-2017-0861.html
https://www.suse.com/security/cve/CVE-2017-11089.html
https://www.suse.com/security/cve/CVE-2017-13220.html
https://www.suse.com/security/cve/CVE-2017-18203.html
https://www.suse.com/security/cve/CVE-2018-10087.html
https://www.suse.com/security/cve/CVE-2018-10124.html
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2018:1221-1
Rating: important
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!