Описание
Security update for the Linux Kernel (Live Patch 1 for SLE 15)
This update for the Linux Kernel 4.12.14-25_3 fixes one issue.
The following security issue was fixed:
- CVE-2018-14734: drivers/infiniband/core/ucma.c allowed ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial of service (use-after-free) (bsc#1131390).
Список пакетов
SUSE Linux Enterprise Live Patching 15
kernel-livepatch-4_12_14-25_3-default-9-2.1
Ссылки
- Link for SUSE-SU-2019:1437-1
- E-Mail link for SUSE-SU-2019:1437-1
- SUSE Security Ratings
- SUSE Bug 1131390
- SUSE CVE CVE-2018-14734 page
Описание
drivers/infiniband/core/ucma.c in the Linux kernel through 4.17.11 allows ucma_leave_multicast to access a certain data structure after a cleanup step in ucma_process_join, which allows attackers to cause a denial of service (use-after-free).
Затронутые продукты
SUSE Linux Enterprise Live Patching 15:kernel-livepatch-4_12_14-25_3-default-9-2.1
Ссылки
- CVE-2018-14734
- SUSE Bug 1103119
- SUSE Bug 1131390