Lucene search

K
suseSuseSUSE-SU-2015:0832-1
HistoryMay 07, 2015 - 8:04 p.m.

Security update for kgraft-patch-SLE12_Update_1, kgraft-patch-SLE12_Update_2 (important)

2015-05-0720:04:53
lists.opensuse.org
37

0.061 Low

EPSS

Percentile

93.6%

This update supplies kgraft patches to fix one security vulnerability.

CVE-2015-1421: A use-after-free vulnerability in the sctp_assoc_update
function in net/sctp/associola.c in the Linux kernel allowed remote
attackers to cause a denial of service (slab corruption and panic) or
possibly have unspecified other impact by triggering an INIT collision
that leads to improper handling of shared-key data.

This patch supplies kgraft patches for the first kernel update and the
second kernel update published for SUSE Linux Enterprise Server 12. The
third kernel update contains the patch already.