SUSE: 2019:3249-1 Important: Linux Kernel Live Patch 11 Critical Threat
suse
December 11, 2019
An update that solves three vulnerabilities and has one errata is now available
Summary
This update for the Linux Kernel 4.12.14-150_22 fixes several issues. The following security issues were fixed: - CVE-2019-13272: Fixed a privilege escalation from user to root due to improper handling of credentials by leveraging certain scenarios with a parent-child process relationship (bsc#1156321). - CVE-2019-15239: Fixed a vulnerability where a local attacker could have triggered multiple use-after-free conditions resulted in privilege escalation (bsc#1156317). - CVE-2019-10220: Fixed an issue where samba servers could inject relative paths in directory entry lists (bsc#1153108). The following bugs were fixed: - Fixed boot up hang revealed by int3 self test (bsc#1157770). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods
References
#1153108 #1156317 #1156321 #1157770
Cross- CVE-2019-10220 CVE-2019-13272 CVE-2019-15239
Affected Products:
SUSE Linux Enterprise Module for Live Patching 15-SP1
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Live Patching 12-SP4
https://www.suse.com/security/cve/CVE-2019-10220.html
https://www.suse.com/security/cve/CVE-2019-13272.html
https://www.suse.com/security/cve/CVE-2019-15239.html
https://bugzilla.suse.com/1153108
https://bugzilla.suse.com/1156317
https://bugzilla.suse.com/1156321
https://bugzilla.suse.com/1157770
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2019:3249-1
Rating: important
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!