File _patchinfo of Package patchinfo.12731
<patchinfo incident="12731">
<issue id="1151021" tracker="bnc"></issue>
<issue id="2019-14835" tracker="cve" />
<category>security</category>
<rating>important</rating>
<packager>nstange</packager>
<description>This update for the Linux Kernel 4.4.121-92_117 fixes one issue.
The following security issue was fixed:
- CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host (bsc#1151021).
</description>
<summary>Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP2)</summary>
</patchinfo>