p PatchFirst

SUSE-SU-2019:2613-1

SUSE-SU-2019:2613-1 · Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP2)

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for the Linux Kernel 4.4.121-92_101 fixes one issue. The following security issue was fixed: - CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host (bsc#1151021).

Fix available

Published
Updated

Stack: system

Affected products and versions

Original sources

Check your server →