SUSE-SU-2018:3865-1: kgraft-patch-SLE12-SP3_Update_5&distro=SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise

Vulnerability summary

SUSE-SU-2018:3865-1 is a vulnerability in kgraft-patch-SLE12-SP3_Update_5&distro=SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise with no CVSS score yet.

Timeline

1. 22-11-2018
   PublishedVulnerability first disclosed.
2. 04-02-2026
   Last modifiedVulnerability information updated.

Description

Security update for the Linux Kernel (Live Patch 5 for SLE 12 SP3) This update for the Linux Kernel 4.4.92-6_30 fixes several issues. The following security issues were fixed: - CVE-2018-5391: Fixed a possible denial of service attack with low rates of specially modified packets targeting IP fragment re-assembly. An attacker may cause a denial of service condition by sending specially crafted IP fragments. The current vulnerability (CVE-2018-5391) became exploitable in the Linux kernel with the increase of the IP fragment reassembly queue size (bsc#1103098). - CVE-2018-18386: The drivers/tty/n_tty.c allowed local attackers (who are able to access pseudo terminals) to hang/block further usage of any pseudo terminal devices due to an EXTPROC versus ICANON confusion in TIOCINQ (bsc#1112039).

No weakness data has been published for this record.