Lucene search

K
suseSuseSUSE-SU-2018:0278-1
HistoryJan 30, 2018 - 12:11 p.m.

Security update for the Linux Kernel (Live Patch 9 for SLE 12 SP2) (important)

2018-01-3012:11:24
lists.opensuse.org
24

0.0004 Low

EPSS

Percentile

5.7%

This update for the Linux Kernel 4.4.59-92_24 fixes several issues.

The following security issues were fixed:

  • CVE-2017-17712: The raw_sendmsg() function had a race condition that
    lead to uninitialized stack pointer usage. This allowed a local user to
    execute code and gain privileges (bsc#1073230).
  • CVE-2017-16939: The XFRM dump policy implementation allowed local users
    to gain privileges or cause a denial of service (use-after-free) via a
    crafted SO_RCVBUF setsockopt system call in conjunction with
    XFRM_MSG_GETPOLICY Netlink messages (bsc#1069708).

0.0004 Low

EPSS

Percentile

5.7%

Related for SUSE-SU-2018:0278-1