File _patchinfo of Package patchinfo.6077

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.6077

<patchinfo incident="6077">
  <issue id="1063671" tracker="bnc">VUL-0: CVE-2017-13080: kernel live patch: mac80211 driver also has key reinstallation problem "KRACK"</issue>
  <issue id="1064392" tracker="bnc">VUL-0: CVE-2017-15649: kernel live patch: net/packet/af_packet.c allows local users to gain privileges via crafted system calls that trigger mishandling of packet_fanout data structures</issue>
  <issue id="1066471" tracker="bnc">backport 2bdd713b92a9ca mac80211: use constant time comparison with keys</issue>
  <issue id="1066472" tracker="bnc">backport cfbb0d90a7abb2 mac80211: don't compare TKIP TX MIC key in reinstall prevention</issue>
  <issue id="2017-13080" tracker="cve" />
  <issue id="2017-15649" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>mbenes</packager>
  <description>This update for the Linux Kernel 3.12.61-52_72 fixes several issues.

The following security issues were fixed:

- CVE-2017-15649: net/packet/af_packet.c in the Linux kernel allowed local users to gain privileges via crafted system calls that trigger mishandling of packet_fanout data structures, because of a race condition (involving fanout_add and packet_do_bind) that leads to a use-after-free, a different vulnerability than CVE-2017-6346 (bsc#1064392)
- CVE-2017-13080: Wi-Fi Protected Access (WPA and WPA2) allowed reinstallation of the Group Temporal Key (GTK) during the group key handshake, allowing an attacker within radio range to replay frames from access points to clients (bsc#1063671, bsc#1066472, bsc#1066471)
</description>
<summary>Security update for the Linux Kernel (Live Patch 21 for SLE 12)</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.6077

Places