SUSE-SU-2018:0233-1
SUSE-SU-2018:0233-1 · Security update for the Linux Kernel (Live Patch 30 for SLE 12)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the Linux Kernel 3.12.61-52_111 fixes one issue. The following security issue was fixed: - CVE-2017-15649: net/packet/af_packet.c in the Linux kernel allowed local users to gain privileges via crafted system calls that trigger mishandling of packet_fanout data structures, because of a race condition (involving fanout_add and packet_do_bind) that leads to a use-after-free. This fixes the earlier kgraft update, that could have caused crashes when trying to exploit this vulnerability after applying the kgraft update (bsc#1064392, bsc#1064388).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kgraft-patch-sle12_update_30 SUSE:Linux Enterprise Server 12-LTSS
- Affected ranges
- ECOSYSTEM: < 2-2.1
Update to 2-2.1