SUSE-SU-2019:1767-1
SUSE-SU-2019:1767-1 · Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP2)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the Linux Kernel 4.4.121-92_114 fixes several issues. The following security issues were fixed: - CVE-2019-11487: The Linux kernel allowed page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests (bsc#1133191). - CVE-2018-5390: Linux kernel could be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which can lead to a denial of service (bsc#1102682).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kgraft-patch-sle12-sp1_update_34 SUSE:Linux Enterprise Server for SAP Applications 12 SP1
- Affected ranges
- ECOSYSTEM: < 2-2.1
Update to 2-2.1
kgraft-patch-sle12-sp2_update_30 SUSE:Linux Enterprise Server for SAP Applications 12 SP2
- Affected ranges
- ECOSYSTEM: < 2-2.1
Update to 2-2.1
kgraft-patch-sle12-sp1_update_34 SUSE:Linux Enterprise Server 12 SP1-LTSS
- Affected ranges
- ECOSYSTEM: < 2-2.1
Update to 2-2.1
kgraft-patch-sle12-sp2_update_30 SUSE:Linux Enterprise Server 12 SP2-LTSS
- Affected ranges
- ECOSYSTEM: < 2-2.1
Update to 2-2.1