SUSE-SU-2017:1281-1
SUSE-SU-2017:1281-1 · Security update for Linux Kernel Live Patch 20 for SLE 12
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update the for Linux Kernel 3.12.61-52.69 fixes one issue. The following security bug was fixed: - CVE-2017-5970: The ipv4_pktinfo_prepare function in net/ipv4/ip_sockglue.c in the Linux kernel allowed attackers to cause a denial of service (system crash) via (1) an application that made crafted system calls or possibly (2) IPv4 traffic with invalid IP options (bsc#1025013). - CVE-2017-7308: The packet_set_ring function in net/packet/af_packet.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of service (overflow) or possibly have unspecified other impact via crafted system calls (bsc#1030575, bsc#1031660).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kgraft-patch-sle12_update_20 SUSE:Linux Enterprise Server for SAP Applications 12
- Affected ranges
- ECOSYSTEM: < 2-4.1
Update to 2-4.1
kgraft-patch-sle12_update_20 SUSE:Linux Enterprise Server 12-LTSS
- Affected ranges
- ECOSYSTEM: < 2-4.1
Update to 2-4.1
Original sources
- https://www.suse.com/support/update/announcement/2017/suse-su-20171281-1/
- https://bugzilla.suse.com/1025013
- https://bugzilla.suse.com/1030575
- https://bugzilla.suse.com/1031660
- https://www.suse.com/security/cve/CVE-2017-5970
- https://www.suse.com/security/cve/CVE-2017-7308
- https://osv.dev/vulnerability/SUSE-SU-2017:1281-1