File _patchinfo of Package patchinfo.12761
<patchinfo incident="12761">
<issue id="1149841" tracker="bnc"></issue>
<issue id="1151021" tracker="bnc"></issue>
<issue id="2019-14835" tracker="cve" />
<category>security</category>
<rating>important</rating>
<packager>nstange</packager>
<description>This update for the Linux Kernel 4.12.14-195 fixes several issues.
The following security issue was fixed:
- CVE-2019-14835: A buffer overflow flaw was found in the way vhost functionality, that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host (bsc#1151021).
</description>
<summary>Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP1)</summary>
</patchinfo>