p PatchFirst

SUSE-SU-2019:0356-1

SUSE-SU-2019:0356-1 · Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP2)

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

This update for the Linux Kernel 4.4.121-92_95 fixes one issue. The following security issue was fixed: - CVE-2018-16884: A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time could make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user could cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out (bsc#1119947).

Fix available

Published
Updated

Stack: system

Affected products and versions

Original sources

Check your server →