File _patchinfo of Package patchinfo.5813

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.5813

<patchinfo incident="5813">
  <issue id="2017-15274" tracker="cve" />
  <issue id="1045327" tracker="bnc" />
  <issue id="1038564" tracker="bnc">VUL-0: CVE-2017-8890: kernel live patch: denial of service (double free) by leveraging use of the accept system call (inet_csk_clone_lock func in net/ipv4/inet_connection_sock.c)</issue>
  <issue id="1042892" tracker="bnc">VUL-0: CVE-2017-9242: kernel live patch: Incorrect overwrite check in __ip6_append_data()</issue>
  <issue id="1052311" tracker="bnc">VUL-0: CVE-2017-1000112: kernel: udp: consistently apply ufo or fragmentation</issue>
  <issue id="1052368" tracker="bnc">VUL-0: CVE-2017-1000112: kernel live patch: udp: consistently apply ufo or fragmentation</issue>
  <issue id="2017-1000112" tracker="cve" />
  <issue id="2017-8890" tracker="cve" />
  <issue id="2017-9242" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>mbenes</packager>
  <description>This update for the Linux Kernel 3.12.74-60_64_60 fixes several issues.

The following security bugs were fixed:

- CVE-2017-15274: security/keys/keyctl.c in the Linux kernel did not consider the case of a NULL payload in conjunction with a nonzero length value, which allowed local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call (bsc#1045327).
- CVE-2017-1000112: Updated patch for this issue to be in sync with the other livepatches. Description of the issue: Prevent race condition in net-packet code that could have been exploited by unprivileged users to gain root access (bsc#1052368, bsc#1052311).
- CVE-2017-9242: The __ip6_append_data function in net/ipv6/ip6_output.c was too late in checking whether an overwrite of an skb data structure may occur, which allowed local users to cause a denial of service (system crash) via crafted system calls (bsc#1042892).
- CVE-2017-8890: The inet_csk_clone_lock function in net/ipv4/inet_connection_sock.c allowed attackers to cause a denial of service (double free) or possibly have unspecified other impact by leveraging use of the accept system call (bsc#1038564).
</description>
<summary>Security update for Linux Kernel Live Patch 21 for SLE 12 SP1</summary>
</patchinfo>

Places

File _patchinfo of Package patchinfo.5813

Places