SUSE-SU-2017:1294-1
SUSE-SU-2017:1294-1 · Security update for Linux Kernel Live Patch 12 for SLE 12 SP1
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the Linux Kernel 3.12.69-60_64_29 fixes several issues. The following security bugs were fixed: - CVE-2017-7308: The packet_set_ring function in net/packet/af_packet.c in the Linux kernel did not properly validate certain block-size data, which allowed local users to cause a denial of service (overflow) or possibly have unspecified other impact via crafted system calls (bsc#1031660). - CVE-2017-7294: The vmw_surface_define_ioctl function in drivers/gpu/drm/vmwgfx/vmwgfx_surface.c in the Linux kernel did not validate addition of certain levels data, which allowed local users to trigger an integer overflow and out-of-bounds write, and cause a denial of service (system hang or crash) or possibly gain privileges, via a crafted ioctl call for a /dev/dri/renderD* device (bsc#1031440, bsc#1031481).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kgraft-patch-sle12-sp1_update_12 SUSE:Linux Enterprise Live Patching 12
- Affected ranges
- ECOSYSTEM: < 4-2.1
Update to 4-2.1
Original sources
- https://www.suse.com/support/update/announcement/2017/suse-su-20171294-1/
- https://bugzilla.suse.com/1030575
- https://bugzilla.suse.com/1031440
- https://bugzilla.suse.com/1031481
- https://bugzilla.suse.com/1031660
- https://www.suse.com/security/cve/CVE-2017-7294
- https://www.suse.com/security/cve/CVE-2017-7308
- https://osv.dev/vulnerability/SUSE-SU-2017:1294-1