SUSE-SU-2018:0269-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 29 Jan 2018, 19:02
Last modified:04 Feb 2026, 02:53

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

29 Jan 2018, 19:02
Published
Vulnerability first disclosed
04 Feb 2026, 02:53
Last Modified
Vulnerability information updated

Description

Security update for the Linux Kernel (Live Patch 8 for SLE 12 SP2) This update for the Linux Kernel 4.4.59-92_20 fixes several issues. The following security issues were fixed: - CVE-2017-17712: The raw_sendmsg() function had a race condition that lead to uninitialized stack pointer usage. This allowed a local user to execute code and gain privileges (bsc#1073230). - CVE-2017-16939: The XFRM dump policy implementation allowed local users to gain privileges or cause a denial of service (use-after-free) via a crafted SO_RCVBUF setsockopt system call in conjunction with XFRM_MSG_GETPOLICY Netlink messages (bsc#1069708).

Affected Systems

  • suse•kgraft-patch-SLE12-SP2_Update_8&distro=SUSE Linux Enterprise Live Patching 12

    < 8-2.1

References (6)