Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE Linux Enterprise 12: 2019:1767-1 Important DoS Kernel Live Patch

suse
Calendar Grey July 8, 2019
Dist Suse Esm H88
A significant Oracle upgrade tackles two severe database vulnerabilities with advised deployment techniques and correction guidelines.
An update that fixes two vulnerabilities is now available

Summary

This update for the Linux Kernel 3.12.74-60_64_115 fixes several issues. The following security issues were fixed: - CVE-2019-11487: The Linux kernel allowed page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests (bsc#1133191). - CVE-2018-5390: Linux kernel could be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service (bsc#1102682). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods

Topics%20covered

Topics Covered

security advisory DoS kernel fix update instructions patching SUSE memory overflow

References

#1102682 #1133191

Cross- CVE-2018-5390 CVE-2019-11487

Affected Products:

SUSE Linux Enterprise Server for SAP 12-SP2

SUSE Linux Enterprise Server for SAP 12-SP1

SUSE Linux Enterprise Server 12-SP2-LTSS

SUSE Linux Enterprise Server 12-SP1-LTSS

https://www.suse.com/security/cve/CVE-2018-5390.html

https://www.suse.com/security/cve/CVE-2019-11487.html

https://bugzilla.suse.com/1102682

https://bugzilla.suse.com/1133191

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2019:1767-1
Rating: important

Topics%20covered

Topics Covered

security advisory DoS kernel fix update instructions patching SUSE memory overflow

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here