SUSE-SU-2019:0645-1

SUSE-SU-2019:0645-1 · Security update for the Linux Kernel (Live Patch 34 for SLE 12)

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for the Linux Kernel 3.12.61-52_128 fixes several issues. The following security issues were fixed: - CVE-2019-9213: Expand_downwards in mm/mmap.c lacked a check for the mmap minimum address, which made it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task (bsc#1128378). - CVE-2019-7221: Fixed a user-after-free vulnerability in the KVM hypervisor related to the emulation of a preemption timer, allowing an guest user/process to crash the host kernel. (bsc#1124734). - CVE-2018-5391: The Linux kernel was vulnerable to a denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker might have caused a denial of service condition by sending specially crafted IP fragments. Various vulnerabilities in IP fragmentation have been discovered and fixed over the years. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size (bsc#1103098).

Fix available

Published

2019-03-19T14:34:19Z

Updated

2026-02-04T03:02:32.802165Z

Stack: system

Check your server →