Описание
Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP1)
This update for the Linux Kernel 3.12.74-60_64_104 fixes one issue.
The following security issue was fixed:
- CVE-2018-9568: Prevent possible memory corruption due to type confusion in sk_clone_lock. This could lead to local privilege escalation (bsc#1118319).
Список пакетов
SUSE Linux Enterprise Server 12 SP1-LTSS
kgraft-patch-3_12_74-60_64_104-default-4-2.1
kgraft-patch-3_12_74-60_64_104-xen-4-2.1
Ссылки
- Link for SUSE-SU-2018:4154-1
- E-Mail link for SUSE-SU-2018:4154-1
- SUSE Security Ratings
- SUSE Bug 1118319
- SUSE CVE CVE-2018-9568 page
Описание
In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-113509306. References: Upstream kernel.
Затронутые продукты
SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_104-default-4-2.1
SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_104-xen-4-2.1
Ссылки
- CVE-2018-9568
- SUSE Bug 1118319
- SUSE Bug 1118320