SUSE-SU-2017:1294-1
SUSE-SU-2017:1294-1 · Security update for Linux Kernel Live Patch 12 for SLE 12 SP1
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for the Linux Kernel 3.12.69-60_64_29 fixes several issues. The following security bugs were fixed: - CVE-2017-7308: The packet_set_ring function in net/packet/af_packet.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of service (overflow) or possibly have unspecified other impact via crafted system calls (bsc#1031660). - CVE-2017-7294: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not validate addition of certain levels data, which allowed local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device (bsc#1031440, bsc#1031481).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
kgraft-patch-sle12-sp1_update_12 SUSE:Linux Enterprise Live Patching 12
- Intervalos de versiones afectados
- ECOSYSTEM: < 4-2.1
Actualiza a 4-2.1
Fuentes originales
- https://www.suse.com/support/update/announcement/2017/suse-su-20171294-1/
- https://bugzilla.suse.com/1030575
- https://bugzilla.suse.com/1031440
- https://bugzilla.suse.com/1031481
- https://bugzilla.suse.com/1031660
- https://www.suse.com/security/cve/CVE-2017-7294
- https://www.suse.com/security/cve/CVE-2017-7308
- https://osv.dev/vulnerability/SUSE-SU-2017:1294-1