Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2019:1422-1

Опубликовано: 05 июн. 2019
Источник: suse-cvrf

Описание

Security update for the Linux Kernel (Live Patch 23 for SLE 12 SP2)

This update for the Linux Kernel 4.4.121-92_85 fixes one issue.

The following security issue was fixed:

  • CVE-2018-14734: drivers/infiniband/core/ucma.c allowed ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial of service (use-after-free) (bsc#1131390).

Список пакетов

SUSE Linux Enterprise Live Patching 12 SP3
kgraft-patch-4_4_132-94_33-default-10-2.1
kgraft-patch-4_4_138-94_39-default-8-2.1
kgraft-patch-4_4_140-94_42-default-8-2.1
SUSE Linux Enterprise Server 12 SP1-LTSS
kgraft-patch-3_12_74-60_64_96-default-10-2.1
kgraft-patch-3_12_74-60_64_96-xen-10-2.1
SUSE Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-4_4_121-92_85-default-8-2.1
SUSE Linux Enterprise Server 12-LTSS
kgraft-patch-3_12_61-52_136-default-10-2.1
kgraft-patch-3_12_61-52_136-xen-10-2.1
SUSE Linux Enterprise Server for SAP Applications 12 SP1
kgraft-patch-3_12_74-60_64_96-default-10-2.1
kgraft-patch-3_12_74-60_64_96-xen-10-2.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-4_4_121-92_85-default-8-2.1

Ссылки

Описание

drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial of service (use-after-free).

Затронутые продукты
SUSE Linux Enterprise Live Patching 12 SP3:kgraft-patch-4_4_132-94_33-default-10-2.1
SUSE Linux Enterprise Live Patching 12 SP3:kgraft-patch-4_4_138-94_39-default-8-2.1
SUSE Linux Enterprise Live Patching 12 SP3:kgraft-patch-4_4_140-94_42-default-8-2.1
SUSE Linux Enterprise Server 12 SP1-LTSS:kgraft-patch-3_12_74-60_64_96-default-10-2.1
Ссылки