SUSE-SU-2017:2798-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 20 Oct 2017, 12:28
Last modified:04 Feb 2026, 04:28

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

20 Oct 2017, 12:28
Published
Vulnerability first disclosed
04 Feb 2026, 04:28
Last Modified
Vulnerability information updated

Description

Security update for Linux Kernel Live Patch 5 for SLE 12 SP2 This update for the Linux Kernel 4.4.49-92_11 fixes several issues. The following security bugs were fixed: - CVE-2017-1000251: The native Bluetooth stack in the Linux Kernel (BlueZ) was vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulting in Remote code execution in kernel space (bsc#1057950). - CVE-2017-12762: In drivers/isdn/i4l/isdn_net.c a user-controlled buffer was copied into a local buffer of constant size using strcpy without a length check which can cause a buffer overflow (bsc#1053150).

Affected Systems

  • suse•kgraft-patch-SLE12-SP2_Update_5&distro=SUSE Linux Enterprise Live Patching 12

    < 7-4.1

References (5)