Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2021:2372-1

Опубликовано: 15 июл. 2021
Источник: suse-cvrf

Описание

Security update for the Linux Kernel (Live Patch 25 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-197_92 fixes one issue.

The following security issue was fixed:

  • CVE-2021-0512: Fixed a possible out-of-bounds write which could lead to local escalation of privilege with no additional execution privileges needed. (bsc#1187597)

Список пакетов

SUSE Linux Enterprise Live Patching 15 SP1
kernel-livepatch-4_12_14-197_92-default-2-2.1

Описание

In __hidinput_change_resolution_multipliers of hid-input.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-173843328References: Upstream kernel


Затронутые продукты
SUSE Linux Enterprise Live Patching 15 SP1:kernel-livepatch-4_12_14-197_92-default-2-2.1

Ссылки