gpp_maybe Security update for linux kernel live patch 10 for sle 12 sp1

SUSE-SLE-Live-Patching-12-2017-155

This update for the Linux Kernel 3.12.67-60_64_21 fixes several issues. The following security bugs were fixed: - CVE-2016-9794: Race condition in the snd_pcm_period_elapsed function in sound/core/pcm_lib.c in the ALSA subsystem in the Linux kernel allowed local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a crafted SNDRV_PCM_TRIGGER_START command (bsc#1013543). - CVE-2016-9576: The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel did not properly restrict the type of iterator, which allowed local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device (bsc#1014271).

• Release Date
  Jan 26 2017
• References
  Bugzilla: 1013543, 1013604, 1014271
  CVEs: CVE-2016-9576, CVE-2016-9794
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Live Patching 12 x86_64

• Packages
  kgraft-patch-3_12_67-60_64_21-default
  Kgraft patch module

  2-2.1 lock rpm

  kgraft-patch-3_12_67-60_64_21-xen
  Kgraft patch module

  2-2.1 lock rpm

  kgraft-patch-SLE12-SP1_Update_10
  Kgraft patch module

  2-2.1 lock src