< back to search

gpp_maybe Security update for the linux kernel (live patch 25 for sle 12 sp2)
SUSE-SLE-SERVER-12-SP2-2019-2593

This update for the Linux Kernel 4.4.121-92_95 fixes one issue. The following security issue was fixed: - CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host (bsc#1151021).

  • Release Date
    Oct 8 2019
  • References
    Bugzilla: 1151021
    CVEs: CVE-2019-14835
  • Type
    security
  • Severity
    important

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12.2 x86_64
SUSE Linux Enterprise Server LTSS 12.2 ppc64le