Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:3032-2

Опубликовано: 22 мар. 2019
Источник: suse-cvrf

Описание

Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP1 LTSS kernel was updated to receive a security fix.

The following security bug was fixed:

  • CVE-2018-17182: The vmacache_flush_all function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations (bnc#1108399).

Список пакетов

SUSE Linux Enterprise Server for SAP Applications 12 SP1
kernel-default-3.12.74-60.64.107.1
kernel-default-base-3.12.74-60.64.107.1
kernel-default-devel-3.12.74-60.64.107.1
kernel-devel-3.12.74-60.64.107.1
kernel-macros-3.12.74-60.64.107.1
kernel-source-3.12.74-60.64.107.1
kernel-syms-3.12.74-60.64.107.1
kernel-xen-3.12.74-60.64.107.1
kernel-xen-base-3.12.74-60.64.107.1
kernel-xen-devel-3.12.74-60.64.107.1
kgraft-patch-3_12_74-60_64_107-default-1-2.3.1
kgraft-patch-3_12_74-60_64_107-xen-1-2.3.1

Ссылки

Описание

An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations.

Затронутые продукты
SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-3.12.74-60.64.107.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-base-3.12.74-60.64.107.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-default-devel-3.12.74-60.64.107.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1:kernel-devel-3.12.74-60.64.107.1
Ссылки