SUSE-SU-2017:2769-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 19 Oct 2017, 05:28
Last modified:02 May 2025, 04:05

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

19 Oct 2017, 05:28
Published
Vulnerability first disclosed
02 May 2025, 04:05
Last Modified
Vulnerability information updated

Description

Security update for Linux Kernel Live Patch 20 for SLE 12 This update for the Linux Kernel 3.12.61-52_69 fixes one issue. The following security bugs were fixed: - CVE-2017-15274: security/keys/keyctl.c in the Linux kernel did not consider the case of a NULL payload in conjunction with a nonzero length value, which allowed local users to cause a denial of service (NULL pointer dereference and OOPS) via a crafted add_key or keyctl system call (bsc#1045327). - CVE-2017-1000251: The native Bluetooth stack in the Linux Kernel (BlueZ) was vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space (bsc#1057950).

Affected Systems

  • suse•kgraft-patch-SLE12_Update_20&distro=SUSE Linux Enterprise Server 12-LTSS

    < 6-4.1

References (5)