Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

SUSE 15: 2019:3246-1 Important Kernel Live Patch Critical Issues

suse
Calendar Grey December 11, 2019
Dist Suse Esm H88
Critical security patch released for SUSE Linux Kernel, targeting several vulnerabilities and offering essential update information.
An update that fixes four vulnerabilities is now available

Summary

This update for the Linux Kernel 4.12.14-25_28 fixes several issues. The following security issues were fixed: - CVE-2019-15917: Fixed a use-after-free when hci_uart_register_dev() fails in hci_uart_set_proto() (bsc#1156334). - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship (bsc#1156321). - CVE-2018-16871: Fixed an issue where an attacker, who could mount an exported NFS filesystem, was able to trigger a null pointer dereference by using an invalid NFS sequence leading to kernel panic and deny of access to the NFS server (bsc#1156320). - CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108). Patch Instructions:

References

#1153108 #1156320 #1156321 #1156334

Cross- CVE-2018-16871 CVE-2019-10220 CVE-2019-13272

CVE-2019-15917

Affected Products:

SUSE Linux Enterprise Module for Live Patching 15

https://www.suse.com/security/cve/CVE-2018-16871.html

https://www.suse.com/security/cve/CVE-2019-10220.html

https://www.suse.com/security/cve/CVE-2019-13272.html

https://www.suse.com/security/cve/CVE-2019-15917.html

https://bugzilla.suse.com/1153108

https://bugzilla.suse.com/1156320

https://bugzilla.suse.com/1156321

https://bugzilla.suse.com/1156334

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2019:3246-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here