Security update for the Linux Kernel (Live Patch 16 for SLE 12 SP2)
This update for the Linux Kernel 4.4.103-92_53 fixes several issues.
The following security issue was fixed:
- CVE-2017-18075: crypto/pcrypt.c in the Linux kernel mishandled freeing instances, allowing a local user able to access the AF_ALG-based AEAD interface (CONFIG_CRYPTO_USER_API_AEAD) and pcrypt (CONFIG_CRYPTO_PCRYPT) to cause a denial of service (kfree of an incorrect pointer) or possibly have unspecified other impact by executing a crafted sequence of system calls (bsc#1077404).
Non security issue fixed:
- btrfs: account for pinned bytes in should_alloc_chunk (bsc#1077268)
Security update for the Linux Kernel (Live Patch 16 for SLE 12 SP2)
This update for the Linux Kernel 4.4.103-92_53 fixes one issue.
The following security issue was fixed:
- CVE-2017-17712: The raw_sendmsg() function had a race condition that lead to uninitialized stack pointer usage. This allowed a local user to execute code and gain privileges (bsc#1073230).
The SUSE Linux Enterprise 12 SP2 kernel was updated to 4.4.103 to receive various security and bugfixes.
This update enables SMB encryption in the CIFS support in the Linux Kernel (fate#324404)
The following security bugs were fixed:
- CVE-2017-1000410: The Linux kernel was affected by an information leak in the processing of incoming L2CAP commands - ConfigRequest, and ConfigResponse messages. (bnc#1070535).
- CVE-2017-11600: net/xfrm/xfrm_policy.c in the Linux kernel did not ensure that the dir value of xfrm_userpolicy_id is XFRM_POLICY_MAX or less, which allowed local users to cause a denial of service (out-of-bounds access) or possib