SUSE-SU-2019:1767-1
SUSE-SU-2019:1767-1 · Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP2)
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
This update for the Linux Kernel 4.4.121-92_114 fixes several issues. The following security issues were fixed: - CVE-2019-11487: The Linux kernel allowed page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests (bsc#1133191). - CVE-2018-5390: Linux kernel could be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service (bsc#1102682).
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
kgraft-patch-sle12-sp1_update_34 SUSE:Linux Enterprise Server for SAP Applications 12 SP1
- Intervalos de versiones afectados
- ECOSYSTEM: < 2-2.1
Actualiza a 2-2.1
kgraft-patch-sle12-sp2_update_30 SUSE:Linux Enterprise Server for SAP Applications 12 SP2
- Intervalos de versiones afectados
- ECOSYSTEM: < 2-2.1
Actualiza a 2-2.1
kgraft-patch-sle12-sp1_update_34 SUSE:Linux Enterprise Server 12 SP1-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 2-2.1
Actualiza a 2-2.1
kgraft-patch-sle12-sp2_update_30 SUSE:Linux Enterprise Server 12 SP2-LTSS
- Intervalos de versiones afectados
- ECOSYSTEM: < 2-2.1
Actualiza a 2-2.1