Sign Up
Log In
Log In
or
Sign Up
Places
All Projects
Status Monitor
Collapse sidebar
SUSE:SLE-12-SP5:GA
patchinfo.10602
_patchinfo
Overview
Repositories
Revisions
Requests
Users
Attributes
Meta
File _patchinfo of Package patchinfo.10602
<patchinfo incident="10602"> <issue id="1102682" tracker="bnc">VUL-0: CVE-2018-5390: kernel live patch: denial of service conditions with low rates of specially modified packets aka "SegmentSmack"</issue> <issue id="1107832" tracker="bnc">VUL-0: CVE-2018-14633: kernel live patch: security flaw in iscsi target code</issue> <issue id="1124729" tracker="bnc">VUL-0: CVE-2019-6974: kernel live patch: KVM: potential use-after-free via kvm_ioctl_create_device()</issue> <issue id="1124734" tracker="bnc">VUL-0: CVE-2019-7221: kernel live patch: KVM: nVMX: use-after-free of the hrtimer for emulation of the preemption timer</issue> <issue id="1128378" tracker="bnc">VUL-0: CVE-2019-9213: kernel live patch: mm: enforce min addr even if capable() in expand_downwards()</issue> <issue id="2018-14633" tracker="cve" /> <issue id="2018-5390" tracker="cve" /> <issue id="2019-6974" tracker="cve" /> <issue id="2019-7221" tracker="cve" /> <issue id="2019-9213" tracker="cve" /> <category>security</category> <rating>important</rating> <packager>mbenes</packager> <description>This update for the Linux Kernel 4.4.121-92_101 fixes several issues. The following security issues were fixed: - CVE-2019-9213: Expand_downwards in mm/mmap.c lacked a check for the mmap minimum address, which made it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task (bsc#1128378). - CVE-2019-7221: Fixed a user-after-free vulnerability in the KVM hypervisor related to the emulation of a preemption timer, allowing an guest user/process to crash the host kernel. (bsc#1124734). - CVE-2019-6974: kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandled reference counting because of a race condition, leading to a use-after-free (bsc#1124729). - CVE-2018-14633: A security flaw was found in the chap_server_compute_md5() function in the ISCSI target code in a way an authentication request from an ISCSI initiator is processed. An unauthenticated remote attacker can cause a stack buffer overflow and smash up to 17 bytes of the stack. The attack requires the iSCSI target to be enabled on the victim host (bsc#1107832). - CVE-2018-5390: The Linux kernel could be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming packet which could have led to a denial of service (bsc#1102682). </description> <summary>Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP2)</summary> </patchinfo>
Locations
Projects
Search
Status Monitor
Help
OpenBuildService.org
Documentation
API Documentation
Code of Conduct
Contact
Support
@OBShq
Terms
openSUSE Build Service is sponsored by
The Open Build Service is an
openSUSE project
.
Sign Up
Log In
Places
Places
All Projects
Status Monitor