Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:1764-1

Опубликовано: 25 июн. 2020
Источник: suse-cvrf

Описание

Security update for the Linux Kernel (Live Patch 33 for SLE 12 SP2)

This update for the Linux Kernel 4.4.121-92_125 fixes one issue.

The following security issue was fixed:

  • CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437).

Список пакетов

SUSE Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-4_4_121-92_129-default-3-2.1
kgraft-patch-4_4_121-92_125-default-6-2.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-4_4_121-92_129-default-3-2.1
kgraft-patch-4_4_121-92_125-default-6-2.1

Ссылки

Описание

A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_125-default-6-2.1
SUSE Linux Enterprise Server 12 SP2-LTSS:kgraft-patch-4_4_121-92_129-default-3-2.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_125-default-6-2.1
SUSE Linux Enterprise Server for SAP Applications 12 SP2:kgraft-patch-4_4_121-92_129-default-3-2.1
Ссылки