SUSE-SU-2017:3226-1
SUSE-SU-2017:3226-1 · Security update for the Linux Kernel
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The SUSE Linux Enterprise 12 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2017-1000405: A bug in the THP CoW support could be used by local attackers to corrupt memory of other processes and cause them to crash (bnc#1069496). - CVE-2017-16939: The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel allowed local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages (bnc#1069702). The following non-security bugs were fixed: Fix a build issue on ppc64le systems (bsc#1070805)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kernel-default SUSE:Linux Enterprise Desktop 12 SP2
- Affected ranges
- ECOSYSTEM: < 4.4.90-92.50.1
Update to 4.4.90-92.50.1
kernel-source SUSE:Linux Enterprise Desktop 12 SP2
- Affected ranges
- ECOSYSTEM: < 4.4.90-92.50.1
Update to 4.4.90-92.50.1
kernel-syms SUSE:Linux Enterprise Desktop 12 SP2
- Affected ranges
- ECOSYSTEM: < 4.4.90-92.50.1
Update to 4.4.90-92.50.1
kernel-default SUSE:Linux Enterprise High Availability Extension 12 SP2
- Affected ranges
- ECOSYSTEM: < 4.4.90-92.50.1
Update to 4.4.90-92.50.1
kgraft-patch-sle12-sp2_update_15 SUSE:Linux Enterprise Live Patching 12
- Affected ranges
- ECOSYSTEM: < 1-4.1
Update to 1-4.1
kernel-default SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
- Affected ranges
- ECOSYSTEM: < 4.4.90-92.50.1
Update to 4.4.90-92.50.1
kernel-source SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
- Affected ranges
- ECOSYSTEM: < 4.4.90-92.50.1
Update to 4.4.90-92.50.1
kernel-syms SUSE:Linux Enterprise Server for Raspberry Pi 12 SP2
- Affected ranges
- ECOSYSTEM: < 4.4.90-92.50.1
Update to 4.4.90-92.50.1
kernel-docs SUSE:Linux Enterprise Software Development Kit 12 SP2
- Affected ranges
- ECOSYSTEM: < 4.4.90-92.50.3
Update to 4.4.90-92.50.3
kernel-obs-build SUSE:Linux Enterprise Software Development Kit 12 SP2
- Affected ranges
- ECOSYSTEM: < 4.4.90-92.50.1
Update to 4.4.90-92.50.1
kernel-default SUSE:Linux Enterprise Server 12 SP2
- Affected ranges
- ECOSYSTEM: < 4.4.90-92.50.1
Update to 4.4.90-92.50.1
kernel-source SUSE:Linux Enterprise Server 12 SP2
- Affected ranges
- ECOSYSTEM: < 4.4.90-92.50.1
Update to 4.4.90-92.50.1
kernel-syms SUSE:Linux Enterprise Server 12 SP2
- Affected ranges
- ECOSYSTEM: < 4.4.90-92.50.1
Update to 4.4.90-92.50.1
kernel-default SUSE:Linux Enterprise Server for SAP Applications 12 SP2
- Affected ranges
- ECOSYSTEM: < 4.4.90-92.50.1
Update to 4.4.90-92.50.1
kernel-source SUSE:Linux Enterprise Server for SAP Applications 12 SP2
- Affected ranges
- ECOSYSTEM: < 4.4.90-92.50.1
Update to 4.4.90-92.50.1
kernel-syms SUSE:Linux Enterprise Server for SAP Applications 12 SP2
- Affected ranges
- ECOSYSTEM: < 4.4.90-92.50.1
Update to 4.4.90-92.50.1
kernel-default SUSE:Linux Enterprise Workstation Extension 12 SP2
- Affected ranges
- ECOSYSTEM: < 4.4.90-92.50.1
Update to 4.4.90-92.50.1
Original sources
- https://www.suse.com/support/update/announcement/2017/suse-su-20173226-1/
- https://bugzilla.suse.com/1069496
- https://bugzilla.suse.com/1069702
- https://bugzilla.suse.com/1070805
- https://www.suse.com/security/cve/CVE-2017-1000405
- https://www.suse.com/security/cve/CVE-2017-16939
- https://osv.dev/vulnerability/SUSE-SU-2017:3226-1