1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2015:1491-1

[SUSE-SU-2015:1491-1] Live patch for the Linux Kernel

Severity Important
CVEs 8
Info References Vulnerabilities

Live patch for the Linux Kernel

This update contains a kernel live patch for the 3.12.39-47 SUSE Linux Enterprise
Server 12 Kernel, fixing following security issues.

  • CVE-2015-3339: A race condition in the prepare_binprm function in
    fs/exec.c in the Linux kernel allowed local users to gain privileges
    by executing a setuid program at a time instant when a chown to root
    is in progress, and the ownership is changed but the setuid bit is not
    yet stripped. (bsc#939263 bsc#939044)

  • CVE-2015-3636: The ping_unhash function in net/ipv4/ping.c in the
    Linux kernel did not initialize a certain list data structure during an
    unhash operation, which allowed local users to gain privileges or cause
    a denial of service (use-after-free and system crash) by leveraging the
    ability to make a SOCK_DGRAM socket system call for the IPPROTO_ICMP
    or IPPROTO_ICMPV6 protocol, and then making a connect system call after
    a disconnect. (bsc#939277)

  • CVE-2015-5364/CVE-2015-5366: Two denial of service attacks via a flood
    of UDP packets with invalid checksums were fixed that could be used
    by remote attackers to delay execution. (bsc#939276)

  • CVE-2015-1805: The (1) pipe_read and (2) pipe_write implementations in
    fs/pipe.c in the Linux kernel did not properly consider the side effects
    of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls,
    which allowed local users to cause a denial of service (system crash)
    or possibly gain privileges via a crafted application, aka an 'I/O vector
    array overrun.' (bsc#939270)

  • CVE-2015-4700: A BPF Jit optimization flaw could allow local users
    to panic the kernel. (bsc#939273)

  • CVE-2015-3331: The __driver_rfc4106_decrypt function in
    arch/x86/crypto/aesni-intel_glue.c in the Linux kernel did not properly
    determine the memory locations used for encrypted data, which allowed
    context-dependent attackers to cause a denial of service (buffer overflow
    and system crash) or possibly execute arbitrary code by triggering a
    crypto API call, as demonstrated by use of a libkcapi test program with
    an AF_ALG(aead) socket. (bsc#939262)

  • CVE-2014-8159: The InfiniBand (IB) implementation in the Linux kernel
    did not properly restrict use of User Verbs for registration of memory
    regions, which allowed local users to access arbitrary physical memory
    locations, and consequently cause a denial of service (system crash)
    or gain privileges, by leveraging permissions on a uverbs device under
    /dev/infiniband/. (bsc#939241)

ID
SUSE-SU-2015:1491-1
Severity
important
URL
https://www.suse.com/support/update/announcement/2015/suse-su-20151491-1/
Published
2015-08-14T12:09:31
(9 years ago)
Modified
2015-08-14T12:09:31
(9 years ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Source # ID Name URL
Suse SUSE ratings https://www.suse.com/support/security/rating/
Suse URL of this CSAF notice https://ftp.suse.com/pub/projects/security/csaf/suse-su-2015_1491-1.json
Suse URL for SUSE-SU-2015:1491-1 https://www.suse.com/support/update/announcement/2015/suse-su-20151491-1/
Suse E-Mail link for SUSE-SU-2015:1491-1 https://lists.suse.com/pipermail/sle-security-updates/2015-September/001574.html
Bugzilla SUSE Bug 939044 https://bugzilla.suse.com/939044
Bugzilla SUSE Bug 939241 https://bugzilla.suse.com/939241
Bugzilla SUSE Bug 939262 https://bugzilla.suse.com/939262
Bugzilla SUSE Bug 939263 https://bugzilla.suse.com/939263
Bugzilla SUSE Bug 939270 https://bugzilla.suse.com/939270
Bugzilla SUSE Bug 939273 https://bugzilla.suse.com/939273
Bugzilla SUSE Bug 939276 https://bugzilla.suse.com/939276
Bugzilla SUSE Bug 939277 https://bugzilla.suse.com/939277
CVE SUSE CVE CVE-2014-8159 page https://www.suse.com/security/cve/CVE-2014-8159/
CVE SUSE CVE CVE-2015-1805 page https://www.suse.com/security/cve/CVE-2015-1805/
CVE SUSE CVE CVE-2015-3331 page https://www.suse.com/security/cve/CVE-2015-3331/
CVE SUSE CVE CVE-2015-3339 page https://www.suse.com/security/cve/CVE-2015-3339/
CVE SUSE CVE CVE-2015-3636 page https://www.suse.com/security/cve/CVE-2015-3636/
CVE SUSE CVE CVE-2015-4700 page https://www.suse.com/security/cve/CVE-2015-4700/
CVE SUSE CVE CVE-2015-5364 page https://www.suse.com/security/cve/CVE-2015-5364/
CVE SUSE CVE CVE-2015-5366 page https://www.suse.com/security/cve/CVE-2015-5366/
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date