Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2018:4196-1

Опубликовано: 19 дек. 2018
Источник: suse-cvrf

Описание

Security update for the Linux Kernel (Live Patch 38 for SLE 12)

This update for the Linux Kernel 3.12.61-52_146 fixes one issue.

The following security issue was fixed:

  • CVE-2018-9568: Prevent possible memory corruption due to type confusion in sk_clone_lock. This could lead to local privilege escalation (bsc#1118319).

Список пакетов

SUSE Linux Enterprise Server 12-LTSS
kgraft-patch-3_12_61-52_141-default-6-2.1
kgraft-patch-3_12_61-52_141-xen-6-2.1
kgraft-patch-3_12_61-52_136-default-7-2.1
kgraft-patch-3_12_61-52_136-xen-7-2.1
kgraft-patch-3_12_61-52_146-default-4-2.1
kgraft-patch-3_12_61-52_146-xen-4-2.1

Ссылки

Описание

In sk_clone_lock of sock.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: Android kernel. Android ID: A-113509306. References: Upstream kernel.

Затронутые продукты
SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_136-default-7-2.1
SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_136-xen-7-2.1
SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_141-default-6-2.1
SUSE Linux Enterprise Server 12-LTSS:kgraft-patch-3_12_61-52_141-xen-6-2.1
Ссылки