SUSE-SU-2017:1280-1
SUSE-SU-2017:1280-1 · Security update for Linux Kernel Live Patch 13 for SLE 12 SP1
Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.
This update for the Linux Kernel 3.12.69-60_64_32 fixes several issues. The following security bugs were fixed: - CVE-2017-7308: The packet_set_ring function in net/packet/af_packet.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of service (overflow) or possibly have unspecified other impact via crafted system calls (bsc#1031660). - CVE-2017-7294: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not validate addition of certain levels data, which allowed local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device (bsc#1031440, bsc#1031481).
Korrektur verfügbar
- Veröffentlicht
- Aktualisiert
Technologie-Stack: system
Betroffene Produkte und Versionen
kgraft-patch-sle12-sp1_update_13 SUSE:Linux Enterprise Live Patching 12
- Betroffene Versionsbereiche
- ECOSYSTEM: < 3-2.1
Auf 3-2.1 aktualisieren
Originalquellen
- https://www.suse.com/support/update/announcement/2017/suse-su-20171280-1/
- https://bugzilla.suse.com/1030575
- https://bugzilla.suse.com/1031440
- https://bugzilla.suse.com/1031481
- https://bugzilla.suse.com/1031660
- https://www.suse.com/security/cve/CVE-2017-7294
- https://www.suse.com/security/cve/CVE-2017-7308
- https://osv.dev/vulnerability/SUSE-SU-2017:1280-1