SUSE-SU-2017:0294-1
SUSE-SU-2017:0294-1 · Security update for Linux Kernel Live Patch 10 for SLE 12 SP1
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
This update for the Linux Kernel 3.12.67-60_64_21 fixes several issues. The following security bugs were fixed: - CVE-2016-9794: Race condition in the snd_pcm_period_elapsed function in sound/core/pcm_lib.c in the ALSA subsystem in the Linux kernel allowed local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted SNDRV_PCM_TRIGGER_START command (bsc#1013543). - CVE-2016-9576: The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel did not properly restrict the type of iterator, which allowed local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device (bsc#1014271).
Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
kgraft-patch-sle12-sp1_update_10 SUSE:Linux Enterprise Live Patching 12
- Betroffene Versionsbereiche
- ECOSYSTEM: < 2-2.1
Auf 2-2.1 aktualisieren
Originalquellen
- https://www.suse.com/support/update/announcement/2017/suse-su-20170294-1/
- https://bugzilla.suse.com/1013543
- https://bugzilla.suse.com/1013604
- https://bugzilla.suse.com/1014271
- https://www.suse.com/security/cve/CVE-2016-9576
- https://www.suse.com/security/cve/CVE-2016-9794
- https://osv.dev/vulnerability/SUSE-SU-2017:0294-1