Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2020:1781-1

Опубликовано: 26 июн. 2020
Источник: suse-cvrf

Описание

Security update for the Linux Kernel (Live Patch 29 for SLE 12 SP3)

This update for the Linux Kernel 4.4.180-94_107 fixes one issue.

The following security issue was fixed:

  • CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access (bsc#1172437).

Список пакетов

SUSE Linux Enterprise Server 12 SP3-LTSS
kgraft-patch-4_4_180-94_113-default-5-2.1
kgraft-patch-4_4_180-94_107-default-6-2.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
kgraft-patch-4_4_180-94_113-default-5-2.1
kgraft-patch-4_4_180-94_107-default-6-2.1

Ссылки

Описание

A flaw was found in the Linux Kernel in versions after 4.5-rc1 in the way mremap handled DAX Huge Pages. This flaw allows a local attacker with access to a DAX enabled storage to escalate their privileges on the system.

Затронутые продукты
SUSE Linux Enterprise Server 12 SP3-LTSS:kgraft-patch-4_4_180-94_107-default-6-2.1
SUSE Linux Enterprise Server 12 SP3-LTSS:kgraft-patch-4_4_180-94_113-default-5-2.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3:kgraft-patch-4_4_180-94_107-default-6-2.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3:kgraft-patch-4_4_180-94_113-default-5-2.1
Ссылки