File _patchinfo of Package patchinfo.6742
<patchinfo incident="6742"> <issue id="1064392" tracker="bnc">VUL-0: CVE-2017-15649: kernel live patch: net/packet/af_packet.c allows local users to gain privileges via crafted system calls that trigger mishandling of packet_fanout data structures</issue> <issue id="2017-15649" tracker="cve" /> <category>security</category> <rating>important</rating> <packager>mbenes</packager> <description>This update for the Linux Kernel 3.12.61-52_119 fixes several issues. The following security issue was fixed: - CVE-2017-15649: net/packet/af_packet.c in the Linux kernel allowed local users to gain privileges via crafted system calls that trigger mishandling of packet_fanout data structures, because of a race condition (involving fanout_add and packet_do_bind) that leads to a use-after-free, a different vulnerability than CVE-2017-6346 (bsc#1064392) </description> <summary>Security update for the Linux Kernel (Live Patch 31 for SLE 12)</summary> </patchinfo>