Lucene search

K
suseSuseSUSE-SU-2018:0233-1
HistoryJan 26, 2018 - 3:08 p.m.

Security update for the Linux Kernel (Live Patch 30 for SLE 12) (important)

2018-01-2615:08:07
lists.opensuse.org
36

0.0004 Low

EPSS

Percentile

0.4%

This update for the Linux Kernel 3.12.61-52_111 fixes one issue.

The following security issue was fixed:

  • CVE-2017-15649: net/packet/af_packet.c in the Linux kernel allowed local
    users to gain privileges via crafted system calls that trigger
    mishandling of packet_fanout data structures, because of a race
    condition (involving fanout_add and packet_do_bind) that leads to a
    use-after-free. This fixes the earlier kgraft update, that could have
    caused crashes when trying to exploit this vulnerability after applying
    the kgraft update (bsc#1064392, bsc#1064388).