Security update for Linux Kernel Live Patch 22 for SLE 12
This update for the Linux Kernel 3.12.61-52_77 fixes several issues.
The following security bugs were fixed:
- CVE-2017-7533: A bug in inotify code allowed local users to escalate privilege (bsc#1050751).
- CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd subsystem in the Linux kernel allowed remote attackers to cause a denial of service (system crash) via a long RPC reply, related to net/sunrpc/svc.c, fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191).
- CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c in the Linux kernel is too late in checking whether an overwrite of an skb data structure may occur, which allowe
Security update for Linux Kernel Live Patch 22 for SLE 12
This update for the Linux Kernel 3.12.61-52_77 fixes several issues.
The following bugs were fixed:
- CVE-2017-1000364: The previous fix for the stack gap increase tracked by CVE-2017-1000364 had a regression, which is fixed by this follow up patch. (bsc#1039496)
The SUSE Linux Enterprise 12 kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:
- CVE-2017-1000364: The default stack guard page was too small and could be 'jumped over' by userland programs using
more than one page of stack in functions and so lead to memory corruption. This update extends the stack guard page
to 1 MB (for 4k pages) and 16 MB (for 64k pages) to reduce this attack vector. This is not a kernel bugfix, but a
hardening measure against this kind of userland attack.(bsc#1039348)
The following non-security bugs were fixed:
netfilter: A use-after-free was fixed that cou