SUSE-SU-2016:0746-1
SUSE-SU-2016:0746-1 · Security update for kernel live patch 4
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This kernel live patch for Linux Kernel 3.12.39-47.1 fixes two security issues: Fixes: - CVE-2016-0728: A reference leak in keyring handling with join_session_keyring() could lead to local attackers gain root privileges. (bsc#962078). - CVE-2013-7446: Use-after-free vulnerability in net/unix/af_unix.c in the Linux kernel allowed local users to bypass intended AF_UNIX socket permissions or cause a denial of service (panic) via crafted epoll_ctl calls. (bsc#955837)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kgraft-patch-sle12_update_4 SUSE:Linux Enterprise Live Patching 12
- Affected ranges
- ECOSYSTEM: < 5-2.1
Update to 5-2.1