gpp_maybe Security update for the linux kernel (live patch 30 for sle 12)

SUSE-SLE-SERVER-12-2018-155

This update for the Linux Kernel 3.12.61-52_111 fixes one issue. The following security issue was fixed: - CVE-2017-15649: net/packet/af_packet.c in the Linux kernel allowed local users to gain privileges via crafted system calls that trigger mishandling of packet_fanout data structures, because of a race condition (involving fanout_add and packet_do_bind) that leads to a use-after-free. This fixes the earlier kgraft update, that could have caused crashes when trying to exploit this vulnerability after applying the kgraft update (bsc#1064392, bsc#1064388).

• Release Date
  Jan 26 2018
• References
  Bugzilla: 1064388, 1064392
  CVEs: CVE-2017-15649
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12 x86_64

• Packages
  kgraft-patch-3_12_61-52_111-default
  Kgraft patch module

  2-2.1 lock rpm

  kgraft-patch-3_12_61-52_111-xen
  Kgraft patch module

  2-2.1 lock rpm

  kgraft-patch-SLE12_Update_30
  Kgraft patch module

  2-2.1 lock src