Security update for the Linux Kernel (Live Patch 1 for SLE 12 SP3) (important)

2018-05-12T00:34:49
ID SUSE-SU-2018:1270-1
Type suse
Reporter Suse
Modified 2018-05-12T00:34:49

Description

This update for the Linux Kernel 4.4.82-6_3 fixes several issues.

The following security issues were fixed:

  • CVE-2018-1000199: A bug in x86 debug register handling of ptrace() could lead to memory corruption, possibly a denial of service or privilege escalation (bsc#1090036).
  • CVE-2017-0861: Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allowed attackers to gain privileges via unspecified vectors (bsc#1088268).