Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:4154-1

Опубликовано: 17 дек. 2018
Источник: suse-cvrf

Описание

Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP1)

This update for the Linux Kernel 3.12.74-60_64_104 fixes one issue.

The following security issue was fixed:

  • CVE-2018-9568: Prevent possible memory corruption due to type confusion in sk_clone_lock. This could lead to local privilege escalation (bsc#1118319).

Список пакетов

SUSE Linux Enterprise Server 12 SP1-LTSS
kgraft-patch-3_12_74-60_64_104-default-4-2.1
kgraft-patch-3_12_74-60_64_104-xen-4-2.1

Описание

In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-113509306. References: Upstream kernel.


Затронутые продукты
SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_104-default-4-2.1
SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_104-xen-4-2.1

Ссылки