Security update for Linux Kernel Live Patch 13 for SLE 12 SP1
This update for the Linux Kernel 3.12.69-60_64_32 fixes several issues.
The following security bugs were fixed:
- CVE-2017-7308: The packet_set_ring function in net/packet/af_packet.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of service (overflow) or possibly have unspecified other impact via crafted system calls (bsc#1031660).
- CVE-2017-7294: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not validate addition of certain levels data, which allowed local users to trigger an integer overflow and out-of-bounds wr
Security update for Linux Kernel Live Patch 13 for SLE 12 SP1
This update for the Linux Kernel 3.12.69-60_64_32 fixes one issue.
The following security bugs were fixed:
- CVE-2017-7184: The XFRM processsing in the Linux kernel 16.10 allowed local users to obtain root privileges or cause a denial of service (heap-based out-of-bounds access) via an integer overflow, as demonstrated during a Pwn2Own competition at CanSecWest 2017 (bsc#1030575).
The SUSE Linux Enterprise 12 SP1 kernel was updated to fix the following two issues:
- CVE-2017-5970: Remote attackers could have potentially caused a denial of service by sending
bad IP options on a socket (bsc#1024938)
- Fix a regression in MD RAID1 which could have caused wrong data to be read (bsc#1020048)