Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2017:1909-1

Опубликовано: 20 июл. 2017
Источник: suse-cvrf

Описание

Security update for Linux Kernel Live Patch 9 for SLE 12 SP1

This update for the Linux Kernel 3.12.67-60_64_18 fixes several issues.

The following security bugs were fixed:

  • CVE-2017-1000364: An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be 'jumped' over (the stack guard page is bypassed) (bsc#1039496).

Список пакетов

SUSE Linux Enterprise Server 12 SP1-LTSS
kgraft-patch-3_12_67-60_64_18-default-8-3.1
kgraft-patch-3_12_67-60_64_18-xen-8-3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
kgraft-patch-3_12_67-60_64_18-default-8-3.1
kgraft-patch-3_12_67-60_64_18-xen-8-3.1

Ссылки

Описание

An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not sufficiently large and can be "jumped" over (the stack guard page is bypassed), this affects Linux Kernel versions 4.11.5 and earlier (the stackguard page was introduced in 2010).

Затронутые продукты
SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_67-60_64_18-default-8-3.1
SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_67-60_64_18-xen-8-3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_67-60_64_18-default-8-3.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1:kgraft-patch-3_12_67-60_64_18-xen-8-3.1
Ссылки