Alerts This Week
Warning Icon 1 692
Alerts This Week
Warning Icon 1 692

SUSE: 2019:3223-1 Important: Kernel Live Patch 2 For SLE 12 SP4

suse
Calendar Grey December 10, 2019
Dist Suse Esm H88
Essential Linux Kernel upgrade addresses multiple security flaws for SUSE 12 SP4. Adhere to patch guidelines without delay.
An update that fixes four vulnerabilities is now available

Summary

This update for the Linux Kernel 4.12.14-95_6 fixes several issues. The following security issues were fixed: - CVE-2019-15917: Fixed a use-after-free when hci_uart_register_dev() fails in hci_uart_set_proto() (bsc#1156334). - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship (bsc#1156321). - CVE-2018-16871: Fixed an issue where an attacker, who could mount an exported NFS filesystem, was able to trigger a null pointer dereference by using an invalid NFS sequence leading to kernel panic and deny of access to the NFS server (bsc#1156320). - CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108). Patch Instructions:

References

#1153108 #1156320 #1156321 #1156334

Cross- CVE-2018-16871 CVE-2019-10220 CVE-2019-13272

CVE-2019-15917

Affected Products:

SUSE Linux Enterprise Live Patching 12-SP4

https://www.suse.com/security/cve/CVE-2018-16871.html

https://www.suse.com/security/cve/CVE-2019-10220.html

https://www.suse.com/security/cve/CVE-2019-13272.html

https://www.suse.com/security/cve/CVE-2019-15917.html

https://bugzilla.suse.com/1153108

https://bugzilla.suse.com/1156320

https://bugzilla.suse.com/1156321

https://bugzilla.suse.com/1156334

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2019:3223-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here