SUSE-SU-2019:1768-1
SUSE-SU-2019:1768-1 · Security update for the Linux Kernel (Live Patch 26 for SLE 12 SP3)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the Linux Kernel 4.4.180-94_97 fixes one issue. The following security issue was fixed: - CVE-2019-11487: The Linux kernel allowed page->_refcount reference count overflow, with resultant use-after-free issues, if about 140 GiB of RAM exists. This is related to fs/fuse/dev.c, fs/pipe.c, fs/splice.c, include/linux/mm.h, include/linux/pipe_fs_i.h, kernel/trace/trace.c, mm/gup.c, and mm/hugetlb.c. It can occur with FUSE requests (bsc#1133191).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kgraft-patch-sle12-sp3_update_26 SUSE:Linux Enterprise Live Patching 12 SP3
- Affected ranges
- ECOSYSTEM: < 2-2.1
Update to 2-2.1