p PatchFirst

PatchFirst · Latest vulnerabilities

kgraft-patch-sle12_update_10 vulnerabilities

Vulnerabilities published for kgraft-patch-sle12_update_10 in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 4

  1. SUSE-SU-2016:1045-1

    Not ratedFix available

    Security update for Linux Kernel Live Patch 10

    This update for the Linux Kernel 3.12.51-52.34.1 fixes the following issues: - CVE-2016-2384: A malicious USB device could cause a kernel crash in the alsa usb-audio driver. (bsc#967773) - CVE-2015-8812: A flaw was found in the CXGB3 kernel driver when the network was considered congested. The kernel would incorrectly misinterpret the congestion as an error condition and incorrectly free/clean up the skb. When the device would then send the skb's queued, these structures would be referenced and may panic the system or allow an attacker to escalate privileges in a use-after-free scenario. (bsc#966683) - CVE-2016-0774: A pipe b

    kgraft-patch-sle12_update_10Operating systems
    • Update to 4-2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. SUSE-SU-2016:0749-1

    Not ratedFix available

    Security update for kernel live patch 10

    This kernel live patch for Linux Kernel 3.12.51-52.34.1 fixes two security issues: Fixes: - CVE-2013-7446: Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel allowed local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted epoll_ctl calls. (bsc#955837)

    kgraft-patch-sle12_update_10Operating systems
    • Update to 3-2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  4. SUSE-SU-2016:0168-1

    Not ratedFix available

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 kernel was updated to receive various security and bugfixes. Following security bugs were fixed: - CVE-2015-7550: A local user could have triggered a race between read and revoke in keyctl (bnc#958951). - CVE-2015-8539: A negatively instantiated user key could have been used by a local user to leverage privileges (bnc#958463). - CVE-2015-8543: The networking implementation in the Linux kernel did not validate protocol identifiers for certain protocol families, which allowed local users to cause a denial of service (NULL function pointer dereference and system crash) or possibly gain privileges by leveraging CLONE

    kgraft-patch-sle12_update_10Operating systems
    • Update to 1-2.1
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →