p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости kgraft-patch-sle12-sp1_update_26

За последние 30 дней в kgraft-patch-sle12-sp1_update_26 опубликовано уязвимостей: 0; в каталоге KEV: 0.

RSS ↗ JSON ↗
Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 12

  1. SUSE-SU-2019:0672-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_107 fixes several issues. The following security issues were fixed: - CVE-2019-9213: Expand_downwards in mm/mmap.c lacked a check for the mmap minimum address, which made it easier for attackers to exploit kernel NULL pointer dereferences on non-SMAP platforms. This is related to a capability check for the wrong task (bsc#1128378). - CVE-2019-7221: Fixed a user-after-free vulnerability in the KVM hypervisor related to the emulation of a preemption timer, allowing an guest user/process to crash the host kernel. (bsc#1124734). - CVE-2019-6974: kvm_ioctl_create_device in virt/kvm/kvm_main.c mishan

    kgraft-patch-sle12-sp1_update_26Операционные системы
    • Обновитесь до 12-2.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  2. SUSE-SU-2019:0356-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP2)

    This update for the Linux Kernel 4.4.121-92_95 fixes one issue. The following security issue was fixed: - CVE-2018-16884: A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time could make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user could cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out (bsc#1119947).

    kgraft-patch-sle12-sp1_update_26Операционные системы
    • Обновитесь до 11-2.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  3. SUSE-SU-2018:4153-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 27 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_88 fixes several issues. The following security issues were fixed: - CVE-2018-9568: Prevent possible memory corruption due to type confusion in sk_clone_lock. This could lead to local privilege escalation (bsc#1118319). - CVE-2018-5848: Fixed an unsigned integer overflow in wmi_set_ie. This could lead to a buffer overflow (bsc#1097356).

    kgraft-patch-sle12-sp1_update_26Операционные системы
    • Обновитесь до 10-2.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  4. SUSE-SU-2018:3772-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_104 fixes one issue. The following security issue was fixed: - CVE-2018-18386: The drivers/tty/n_tty.c allowed local attackers (who are able to access pseudo terminals) to hang/block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ (bsc#1112039).

    kgraft-patch-sle12-sp1_update_26Операционные системы
    • Обновитесь до 9-2.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  5. SUSE-SU-2018:3171-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_99 fixes several issues. The following security issues were fixed: - CVE-2018-17182: The vmacache_flush_all function in mm/vmacache.c mishandled sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations (bsc#1110233). - CVE-2018-14634: An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable (bsc#1108963). - CVE-2018-1

    kgraft-patch-sle12-sp1_update_26Операционные системы
    • Обновитесь до 8-2.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  6. SUSE-SU-2018:2960-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_63 fixes several issues. The following security issues were fixed: - CVE-2018-5390: Prevent very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incoming TCP packet which can lead to a denial of service (bsc#1102682). - CVE-2018-10902: It was found that the raw midi kernel driver did not protect against concurrent access which lead to a double realloc (double free) in snd_rawmidi_input_params() and snd_rawmidi_output_status(), allowing a malicious local attacker to use this for privilege escalation (bsc#1105323).

    kgraft-patch-sle12-sp1_update_26Операционные системы
    • Обновитесь до 7-2.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  7. SUSE-SU-2018:2368-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 26 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_85 fixes several issues. The following security issues were fixed: - CVE-2018-3646: Local attackers in virtualized guest systems could use speculative code patterns on hyperthreaded processors to read data present in the L1 Datacache used by other hyperthreads on the same CPU core, potentially leaking sensitive data, even from other virtual machines or the host system (bsc#1099306). - CVE-2018-10853: A flaw was found in kvm. In which certain instructions such as sgdt/sidt call segmented_write_std didn't propagate access correctly. As such, during userspace induced exception, the guest can incor

    kgraft-patch-sle12-sp1_update_26Операционные системы
    • Обновитесь до 6-2.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  8. SUSE-SU-2018:2093-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 26 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_85 fixes several issues. The following security issue was fixed: - CVE-2018-3665: System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potentially have allowed a local process to infer data from another process via a speculative execution side channel (bsc#1090338, bsc#1096740).

    kgraft-patch-sle12-sp1_update_26Операционные системы
    • Обновитесь до 5-2.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  9. SUSE-SU-2018:1513-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 26 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_85 fixes several issues. The following security issues were fixed: - CVE-2018-8897: A statement in the System Programming Guide of the Intel 64 and IA-32 Architectures Software Developer's Manual (SDM) was mishandled in the development of some or all operating-system kernels, resulting in unexpected behavior for #DB exceptions that are deferred by MOV SS or POP SS, as demonstrated by (for example) privilege escalation in Windows, macOS, some Xen configurations, or FreeBSD, or a Linux kernel crash. The MOV to SS and POP SS instructions inhibit interrupts (including NMIs), data breakpoints, and s

    kgraft-patch-sle12-sp1_update_26Операционные системы
    • Обновитесь до 4-2.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  10. SUSE-SU-2018:1255-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 26 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_85 fixes several issues. The following security issues were fixed: - CVE-2018-1000199: A bug in x86 debug register handling of ptrace() could lead to memory corruption, possibly a denial of service or privilege escalation (bsc#1090036). - CVE-2017-0861: Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allowed attackers to gain privileges via unspecified vectors (bsc#1088268).

    kgraft-patch-sle12-sp1_update_26Операционные системы
    • Обновитесь до 3-2.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  11. SUSE-SU-2018:0991-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel (Live Patch 26 for SLE 12 SP1)

    This update for the Linux Kernel 3.12.74-60_64_85 fixes one issue. The following security issue was fixed: - CVE-2018-7566: The Linux kernel had a buffer overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user (bsc#1083488).

    kgraft-patch-sle12-sp1_update_26Операционные системы
    • Обновитесь до 2-2.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  12. SUSE-SU-2018:0848-1

    Без оценкиЕсть исправление

    Security update for the Linux Kernel

    The SUSE Linux Enterprise 12 SP1 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2018-1068: Fixed flaw in the implementation of 32-bit syscall interface for bridging. This allowed a privileged user to arbitrarily write to a limited range of kernel memory (bnc#1085107). - CVE-2017-18221: The __munlock_pagevec function allowed local users to cause a denial of service (NR_MLOCK accounting corruption) via crafted use of mlockall and munlockall system calls (bnc#1084323). - CVE-2018-1066: Prevent NULL pointer dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_rsp() that allowed

    kgraft-patch-sle12-sp1_update_26Операционные системы
    • Обновитесь до 1-2.3.1
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →