SUSE-SU-2019:2572-1
SUSE-SU-2019:2572-1 · Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for the Linux Kernel 4.12.14-195 fixes several issues. The following security issue was fixed: - CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host (bsc#1151021).
Fix available
- Published
- Updated
Stack: system
Affected products and versions
kgraft-patch-sle12-sp4_update_7 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 2-2.1
Update to 2-2.1
kgraft-patch-sle12-sp4_update_6 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 2-2.1
Update to 2-2.1
kgraft-patch-sle12-sp4_update_4 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 4-2.1
Update to 4-2.1
kgraft-patch-sle12-sp4_update_5 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 3-2.1
Update to 3-2.1
kgraft-patch-sle12-sp4_update_3 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 4-2.1
Update to 4-2.1
kgraft-patch-sle12-sp4_update_2 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 5-2.1
Update to 5-2.1
kgraft-patch-sle12-sp4_update_1 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 6-2.1
Update to 6-2.1
kgraft-patch-sle12-sp4_update_0 SUSE:Linux Enterprise Live Patching 12 SP4
- Affected ranges
- ECOSYSTEM: < 7-2.19.1
Update to 7-2.19.1
kernel-livepatch-sle15_update_13 SUSE:Linux Enterprise Live Patching 15
- Affected ranges
- ECOSYSTEM: < 2-2.1
Update to 2-2.1
kernel-livepatch-sle15_update_7 SUSE:Linux Enterprise Live Patching 15
- Affected ranges
- ECOSYSTEM: < 6-2.1
Update to 6-2.1
kernel-livepatch-sle15_update_11 SUSE:Linux Enterprise Live Patching 15
- Affected ranges
- ECOSYSTEM: < 3-2.1
Update to 3-2.1
kernel-livepatch-sle15_update_10 SUSE:Linux Enterprise Live Patching 15
- Affected ranges
- ECOSYSTEM: < 4-2.1
Update to 4-2.1
kernel-livepatch-sle15_update_5 SUSE:Linux Enterprise Live Patching 15
- Affected ranges
- ECOSYSTEM: < 8-2.1
Update to 8-2.1
kernel-livepatch-sle15_update_6 SUSE:Linux Enterprise Live Patching 15
- Affected ranges
- ECOSYSTEM: < 7-2.1
Update to 7-2.1
kernel-livepatch-sle15_update_9 SUSE:Linux Enterprise Live Patching 15
- Affected ranges
- ECOSYSTEM: < 4-2.1
Update to 4-2.1
kernel-livepatch-sle15_update_8 SUSE:Linux Enterprise Live Patching 15
- Affected ranges
- ECOSYSTEM: < 5-2.1
Update to 5-2.1
kernel-livepatch-sle15_update_12 SUSE:Linux Enterprise Live Patching 15
- Affected ranges
- ECOSYSTEM: < 2-2.1
Update to 2-2.1
kernel-livepatch-sle15-sp1_update_1 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 5-2.1
Update to 5-2.1
kernel-livepatch-sle15-sp1_update_2 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 4-2.1
Update to 4-2.1
kernel-livepatch-sle15-sp1_update_3 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 2-2.1
Update to 2-2.1
kernel-livepatch-sle15-sp1_update_4 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 2-2.1
Update to 2-2.1
kernel-livepatch-sle15-sp1_update_0 SUSE:Linux Enterprise Live Patching 15 SP1
- Affected ranges
- ECOSYSTEM: < 6-16.1
Update to 6-16.1