Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -7 articles for you...
100
security advisoryprivilege escalationimportantSUSE Linux 12: 2016:1031-1 Important: Kernel Privilege Escalation Patch
An update that fixes four vulnerabilities is now available. An update that fixes four vulnerabilities is now available. An update that fixes four vulnerabilities is now available.. SUSE Security Update: Security update for Linux Kernel Live Patch 0 for SP 1 ______________________________________________________________________________ Announcement ID: SUSE-SU-2016:1031-1 Rating: important References: #960563 #964732 #966683 #967773 Cross-References: CVE-2015-8709 CVE-2015-8812 CVE-2016-0774 CVE-2016-2384 Affected Products: SUSE Linux Enterprise Live Patching 12 ______________________________________________________________________________ An update that fixes four vulnerabilities is now available. Description: This update for the Linux Kernel 3.12.49-11.1 fixes the following issues: - CVE-2016-2384: A malicious USB device could cause a kernel crash in the alsa usb-audio driver. (bsc#967773) - CVE-2015-8812: A flaw was found in the CXGB3 kernel driver when the network was considered congested. The kernel would incorrectly misinterpret the congestion as an error condition and incorrectly free/clean up the skb. When the device would then send the skb's queued, these structures would be referenced and may panic the system or allow an attacker to escalate privileges in a use-after-free scenario. (bsc#966683) - CVE-2016-0774: A pipe buffer state corruption after unsuccessful atomic read from pipe was fixed (bsc#964732). - CVE-2015-8709: kernel/ptrace.c in the Linux kernel mishandled uid and gid mappings, which allowed local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call. NOTE: the vendor states "there is no kernel bug here." (bsc#960563) Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Live Patching 12: zypper in -t patch SUSE-SLE-Live-Patching-12-2016-610=1 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Live Patching 12 (x86_64): kgraft-patch-3_12_49-11-default-4-11.2 kgraft-patch-3_12_49-11-xen-4-11.2 References: https://www.suse.com/security/cve/CVE-2015-8709.html https://www.suse.com/security/cve/CVE-2015-8812.html https://www.suse.com/security/cve/CVE-2016-0774.html https://www.suse.com/security/cve/CVE-2016-2384.html https://bugzilla.suse.com/960563 https://bugzilla.suse.com/964732 https://bugzilla.suse.com/966683 https://bugzilla.suse.com/967773 . Tackles essential weaknesses and enhances protection by resolving various concerns in SUSE Linux Kernel Live Patching 12. SUSE Live Patching,Linux Kernel Patch,Security Update,Kernel Issues. . Severity: Important. LinuxSecurity.com Team
Apr 14, 2016
•Important
SuSE
98
security advisorymoderatebug fixRed Hat 6.6 RHSA-2016-0617-01 Moderate: Kernel Pipe Buffer Issue
An update for kernel is now available for Red Hat Enterprise Linux 6.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ==================================================================== Red Hat Security Advisory Synopsis: Moderate: kernel security and bug fix update Advisory ID: RHSA-2016:0617-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2016:0617.html Issue date: 2016-04-12 CVE Names: CVE-2016-0774 ==================================================================== 1. Summary: An update for kernel is now available for Red Hat Enterprise Linux 6.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux HPC Node EUS (v. 6.6) - noarch, x86_64 Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6) - x86_64 Red Hat Enterprise Linux Server EUS (v. 6.6) - i386, noarch, ppc64, s390x, x86_64 Red Hat Enterprise Linux Server Optional EUS (v. 6.6) - i386, ppc64, s390x, x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * It was found that the fix for CVE-2015-1805 incorrectly kept buffer offset and buffer length in sync on a failed atomic read, potentially resulting in a pipe buffer state corruption. A local, unprivileged user could use this flaw to crash the system or leak kernel memory to user space. (CVE-2016-0774, Moderate) The security impact of this issue was discovered by Red Hat. Bug Fix(es): * Due to prematurely decremented calc_load_task, thecalculated load average was off by up to the number of CPUs in the machine. As a consequence, job scheduling worked improperly causing a drop in the system performance. This update keeps the delta of the CPU going into NO_HZ idle separately, and folds the pending idle delta into the global active count while correctly aging the averages for the idle-duration when leaving NO_HZ mode. Now, job scheduling works correctly, ensuring balanced CPU load. (BZ#1308968) * Previously, the Stream Control Transmission Protocol (SCTP) retransmission path selection was not fully RFC compliant when Partial Failover had been enabled. The provided patch provides SCTP path selection updates, thus fixing this bug. (BZ#1306565) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1303961 - CVE-2016-0774 kernel: pipe buffer state corruption after unsuccessful atomic read from pipe 6. Package List: Red Hat Enterprise Linux HPC Node EUS (v.6.6): Source: kernel-2.6.32-504.46.1.el6.src.rpm noarch: kernel-abi-whitelists-2.6.32-504.46.1.el6.noarch.rpm kernel-doc-2.6.32-504.46.1.el6.noarch.rpm kernel-firmware-2.6.32-504.46.1.el6.noarch.rpm x86_64: kernel-2.6.32-504.46.1.el6.x86_64.rpm kernel-debug-2.6.32-504.46.1.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-504.46.1.el6.i686.rpm kernel-debug-debuginfo-2.6.32-504.46.1.el6.x86_64.rpm kernel-debug-devel-2.6.32-504.46.1.el6.i686.rpm kernel-debug-devel-2.6.32-504.46.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-504.46.1.el6.i686.rpm kernel-debuginfo-2.6.32-504.46.1.el6.x86_64.rpm kernel-debuginfo-common-i686-2.6.32-504.46.1.el6.i686.rpm kernel-debuginfo-common-x86_64-2.6.32-504.46.1.el6.x86_64.rpm kernel-devel-2.6.32-504.46.1.el6.x86_64.rpm kernel-headers-2.6.32-504.46.1.el6.x86_64.rpm perf-2.6.32-504.46.1.el6.x86_64.rpm perf-debuginfo-2.6.32-504.46.1.el6.i686.rpm perf-debuginfo-2.6.32-504.46.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-504.46.1.el6.i686.rpm python-perf-debuginfo-2.6.32-504.46.1.el6.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional EUS (v. 6.6): x86_64: kernel-debug-debuginfo-2.6.32-504.46.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-504.46.1.el6.x86_64.rpm kernel-debuginfo-common-x86_64-2.6.32-504.46.1.el6.x86_64.rpm perf-debuginfo-2.6.32-504.46.1.el6.x86_64.rpm python-perf-2.6.32-504.46.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-504.46.1.el6.x86_64.rpm Red Hat Enterprise Linux Server EUS (v.6.6): Source: kernel-2.6.32-504.46.1.el6.src.rpm i386: kernel-2.6.32-504.46.1.el6.i686.rpm kernel-debug-2.6.32-504.46.1.el6.i686.rpm kernel-debug-debuginfo-2.6.32-504.46.1.el6.i686.rpm kernel-debug-devel-2.6.32-504.46.1.el6.i686.rpm kernel-debuginfo-2.6.32-504.46.1.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-504.46.1.el6.i686.rpm kernel-devel-2.6.32-504.46.1.el6.i686.rpm kernel-headers-2.6.32-504.46.1.el6.i686.rpm perf-2.6.32-504.46.1.el6.i686.rpm perf-debuginfo-2.6.32-504.46.1.el6.i686.rpm python-perf-debuginfo-2.6.32-504.46.1.el6.i686.rpm noarch: kernel-abi-whitelists-2.6.32-504.46.1.el6.noarch.rpm kernel-doc-2.6.32-504.46.1.el6.noarch.rpm kernel-firmware-2.6.32-504.46.1.el6.noarch.rpm ppc64: kernel-2.6.32-504.46.1.el6.ppc64.rpm kernel-bootwrapper-2.6.32-504.46.1.el6.ppc64.rpm kernel-debug-2.6.32-504.46.1.el6.ppc64.rpm kernel-debug-debuginfo-2.6.32-504.46.1.el6.ppc64.rpm kernel-debug-devel-2.6.32-504.46.1.el6.ppc64.rpm kernel-debuginfo-2.6.32-504.46.1.el6.ppc64.rpm kernel-debuginfo-common-ppc64-2.6.32-504.46.1.el6.ppc64.rpm kernel-devel-2.6.32-504.46.1.el6.ppc64.rpm kernel-headers-2.6.32-504.46.1.el6.ppc64.rpm perf-2.6.32-504.46.1.el6.ppc64.rpm perf-debuginfo-2.6.32-504.46.1.el6.ppc64.rpm python-perf-debuginfo-2.6.32-504.46.1.el6.ppc64.rpm s390x: kernel-2.6.32-504.46.1.el6.s390x.rpm kernel-debug-2.6.32-504.46.1.el6.s390x.rpm kernel-debug-debuginfo-2.6.32-504.46.1.el6.s390x.rpm kernel-debug-devel-2.6.32-504.46.1.el6.s390x.rpm kernel-debuginfo-2.6.32-504.46.1.el6.s390x.rpm kernel-debuginfo-common-s390x-2.6.32-504.46.1.el6.s390x.rpm kernel-devel-2.6.32-504.46.1.el6.s390x.rpm kernel-headers-2.6.32-504.46.1.el6.s390x.rpm kernel-kdump-2.6.32-504.46.1.el6.s390x.rpm kernel-kdump-debuginfo-2.6.32-504.46.1.el6.s390x.rpm kernel-kdump-devel-2.6.32-504.46.1.el6.s390x.rpm perf-2.6.32-504.46.1.el6.s390x.rpm perf-debuginfo-2.6.32-504.46.1.el6.s390x.rpm python-perf-debuginfo-2.6.32-504.46.1.el6.s390x.rpm x86_64: kernel-2.6.32-504.46.1.el6.x86_64.rpm kernel-debug-2.6.32-504.46.1.el6.x86_64.rpm kernel-debug-debuginfo-2.6.32-504.46.1.el6.i686.rpm kernel-debug-debuginfo-2.6.32-504.46.1.el6.x86_64.rpm kernel-debug-devel-2.6.32-504.46.1.el6.i686.rpm kernel-debug-devel-2.6.32-504.46.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-504.46.1.el6.i686.rpm kernel-debuginfo-2.6.32-504.46.1.el6.x86_64.rpm kernel-debuginfo-common-i686-2.6.32-504.46.1.el6.i686.rpm kernel-debuginfo-common-x86_64-2.6.32-504.46.1.el6.x86_64.rpm kernel-devel-2.6.32-504.46.1.el6.x86_64.rpm kernel-headers-2.6.32-504.46.1.el6.x86_64.rpm perf-2.6.32-504.46.1.el6.x86_64.rpm perf-debuginfo-2.6.32-504.46.1.el6.i686.rpm perf-debuginfo-2.6.32-504.46.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-504.46.1.el6.i686.rpm python-perf-debuginfo-2.6.32-504.46.1.el6.x86_64.rpm Red Hat Enterprise Linux Server Optional EUS (v.6.6): i386: kernel-debug-debuginfo-2.6.32-504.46.1.el6.i686.rpm kernel-debuginfo-2.6.32-504.46.1.el6.i686.rpm kernel-debuginfo-common-i686-2.6.32-504.46.1.el6.i686.rpm perf-debuginfo-2.6.32-504.46.1.el6.i686.rpm python-perf-2.6.32-504.46.1.el6.i686.rpm python-perf-debuginfo-2.6.32-504.46.1.el6.i686.rpm ppc64: kernel-debug-debuginfo-2.6.32-504.46.1.el6.ppc64.rpm kernel-debuginfo-2.6.32-504.46.1.el6.ppc64.rpm kernel-debuginfo-common-ppc64-2.6.32-504.46.1.el6.ppc64.rpm perf-debuginfo-2.6.32-504.46.1.el6.ppc64.rpm python-perf-2.6.32-504.46.1.el6.ppc64.rpm python-perf-debuginfo-2.6.32-504.46.1.el6.ppc64.rpm s390x: kernel-debug-debuginfo-2.6.32-504.46.1.el6.s390x.rpm kernel-debuginfo-2.6.32-504.46.1.el6.s390x.rpm kernel-debuginfo-common-s390x-2.6.32-504.46.1.el6.s390x.rpm kernel-kdump-debuginfo-2.6.32-504.46.1.el6.s390x.rpm perf-debuginfo-2.6.32-504.46.1.el6.s390x.rpm python-perf-2.6.32-504.46.1.el6.s390x.rpm python-perf-debuginfo-2.6.32-504.46.1.el6.s390x.rpm x86_64: kernel-debug-debuginfo-2.6.32-504.46.1.el6.x86_64.rpm kernel-debuginfo-2.6.32-504.46.1.el6.x86_64.rpm kernel-debuginfo-common-x86_64-2.6.32-504.46.1.el6.x86_64.rpm perf-debuginfo-2.6.32-504.46.1.el6.x86_64.rpm python-perf-2.6.32-504.46.1.el6.x86_64.rpm python-perf-debuginfo-2.6.32-504.46.1.el6.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key 7. References: https://access.redhat.com/security/cve/CVE-2016-0774 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2016 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iD8DBQFXDL+/XlSAg2UNWIIRAol+AJwNhTwTSUKXQDUAKKr4q2mPe7uaCwCcCxm7 M3jbmpCfb8xbsvKiLrq7PRE=CEra -----END PGP SIGNATURE----- -- Enterprise-watch-list mailing list
Apr 12, 2016
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!