SUSE-SU-2019:0326-1
SUSE-SU-2019:0326-1 · Security update for the Linux Kernel (Live Patch 35 for SLE 12)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the Linux Kernel 3.12.61-52_133 fixes one issue. The following security issue was fixed: - CVE-2018-16884: A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time could make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user could cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out (bsc#1119947).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kgraft-patch-sle12_update_37 SUSE:Linux Enterprise Server 12-LTSS
- Affected ranges
- ECOSYSTEM: < 7-2.1
Update to 7-2.1
kgraft-patch-sle12_update_36 SUSE:Linux Enterprise Server 12-LTSS
- Affected ranges
- ECOSYSTEM: < 8-2.1
Update to 8-2.1
kgraft-patch-sle12_update_31 SUSE:Linux Enterprise Server 12-LTSS
- Affected ranges
- ECOSYSTEM: < 12-2.1
Update to 12-2.1
kgraft-patch-sle12_update_38 SUSE:Linux Enterprise Server 12-LTSS
- Affected ranges
- ECOSYSTEM: < 5-2.1
Update to 5-2.1
kgraft-patch-sle12_update_33 SUSE:Linux Enterprise Server 12-LTSS
- Affected ranges
- ECOSYSTEM: < 11-2.1
Update to 11-2.1
kgraft-patch-sle12_update_34 SUSE:Linux Enterprise Server 12-LTSS
- Affected ranges
- ECOSYSTEM: < 9-2.1
Update to 9-2.1
kgraft-patch-sle12_update_32 SUSE:Linux Enterprise Server 12-LTSS
- Affected ranges
- ECOSYSTEM: < 12-2.1
Update to 12-2.1
kgraft-patch-sle12_update_35 SUSE:Linux Enterprise Server 12-LTSS
- Affected ranges
- ECOSYSTEM: < 8-2.1
Update to 8-2.1