suse-su-2016:1041-1
Vulnerability from csaf_suse
Published
2016-04-14 14:31
Modified
2016-04-14 14:31
Summary
Security update for Linux Kernel Live Patch 8

Notes

Title of the patch
Security update for Linux Kernel Live Patch 8
Description of the patch
This update for the Linux Kernel 3.12.48-52.27.1 fixes the following issues: - CVE-2016-2384: A malicious USB device could cause a kernel crash in the alsa usb-audio driver. (bsc#967773) - CVE-2015-8812: A flaw was found in the CXGB3 kernel driver when the network was considered congested. The kernel would incorrectly misinterpret the congestion as an error condition and incorrectly free/clean up the skb. When the device would then send the skb's queued, these structures would be referenced and may panic the system or allow an attacker to escalate privileges in a use-after-free scenario. (bsc#966683) - CVE-2016-0774: A pipe buffer state corruption after unsuccessful atomic read from pipe was fixed (bsc#964732). - CVE-2015-8709: kernel/ptrace.c in the Linux kernel mishandled uid and gid mappings, which allowed local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call. NOTE: the vendor states 'there is no kernel bug here.' (bsc#960563)
Patchnames
SUSE-SLE-Live-Patching-12-2016-618
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).


To clipboard 

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for Linux Kernel Live Patch 8",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update for the Linux Kernel 3.12.48-52.27.1 fixes the following issues:\n\n- CVE-2016-2384: A malicious USB device could cause a kernel crash in\n  the alsa usb-audio driver. (bsc#967773)\n\n- CVE-2015-8812: A flaw was found in the CXGB3 kernel driver when\n  the network was considered congested.  The kernel would incorrectly\n  misinterpret the congestion as an error condition and incorrectly\n  free/clean up the skb. When the device would then send the skb\u0027s queued,\n  these structures would be referenced and may panic the system or allow\n  an attacker to escalate privileges in a use-after-free scenario. (bsc#966683)\n\n- CVE-2016-0774: A pipe buffer state corruption after unsuccessful atomic\n  read from pipe was fixed (bsc#964732).\n\n- CVE-2015-8709: kernel/ptrace.c in the Linux kernel mishandled uid and\n  gid mappings, which allowed local users to gain privileges by establishing\n  a user namespace, waiting for a root process to enter that namespace\n  with an unsafe uid or gid, and then using the ptrace system call. NOTE:\n  the vendor states \u0027there is no kernel bug here.\u0027 (bsc#960563)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-Live-Patching-12-2016-618",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_1041-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2016:1041-1",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161041-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2016:1041-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2016-April/002011.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 960563",
        "url": "https://bugzilla.suse.com/960563"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 964732",
        "url": "https://bugzilla.suse.com/964732"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 966683",
        "url": "https://bugzilla.suse.com/966683"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 967773",
        "url": "https://bugzilla.suse.com/967773"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8709 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8709/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2015-8812 page",
        "url": "https://www.suse.com/security/cve/CVE-2015-8812/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-0774 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-0774/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-2384 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-2384/"
      }
    ],
    "title": "Security update for Linux Kernel Live Patch 8",
    "tracking": {
      "current_release_date": "2016-04-14T14:31:11Z",
      "generator": {
        "date": "2016-04-14T14:31:11Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2016:1041-1",
      "initial_release_date": "2016-04-14T14:31:11Z",
      "revision_history": [
        {
          "date": "2016-04-14T14:31:11Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "kgraft-patch-3_12_48-52_27-default-4-2.1.x86_64",
                "product": {
                  "name": "kgraft-patch-3_12_48-52_27-default-4-2.1.x86_64",
                  "product_id": "kgraft-patch-3_12_48-52_27-default-4-2.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "kgraft-patch-3_12_48-52_27-xen-4-2.1.x86_64",
                "product": {
                  "name": "kgraft-patch-3_12_48-52_27-xen-4-2.1.x86_64",
                  "product_id": "kgraft-patch-3_12_48-52_27-xen-4-2.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Live Patching 12",
                "product": {
                  "name": "SUSE Linux Enterprise Live Patching 12",
                  "product_id": "SUSE Linux Enterprise Live Patching 12",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-live-patching:12"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-3_12_48-52_27-default-4-2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12",
          "product_id": "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-default-4-2.1.x86_64"
        },
        "product_reference": "kgraft-patch-3_12_48-52_27-default-4-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "kgraft-patch-3_12_48-52_27-xen-4-2.1.x86_64 as component of SUSE Linux Enterprise Live Patching 12",
          "product_id": "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-xen-4-2.1.x86_64"
        },
        "product_reference": "kgraft-patch-3_12_48-52_27-xen-4-2.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Live Patching 12"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2015-8709",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8709"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "kernel/ptrace.c in the Linux kernel through 4.4.1 mishandles uid and gid mappings, which allows local users to gain privileges by establishing a user namespace, waiting for a root process to enter that namespace with an unsafe uid or gid, and then using the ptrace system call.  NOTE: the vendor states \"there is no kernel bug here.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-default-4-2.1.x86_64",
          "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-xen-4-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8709",
          "url": "https://www.suse.com/security/cve/CVE-2015-8709"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1010933 for CVE-2015-8709",
          "url": "https://bugzilla.suse.com/1010933"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 959709 for CVE-2015-8709",
          "url": "https://bugzilla.suse.com/959709"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 960561 for CVE-2015-8709",
          "url": "https://bugzilla.suse.com/960561"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 960563 for CVE-2015-8709",
          "url": "https://bugzilla.suse.com/960563"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-default-4-2.1.x86_64",
            "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-xen-4-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-default-4-2.1.x86_64",
            "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-xen-4-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-04-14T14:31:11Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8709"
    },
    {
      "cve": "CVE-2015-8812",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2015-8812"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free) via crafted packets.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-default-4-2.1.x86_64",
          "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-xen-4-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2015-8812",
          "url": "https://www.suse.com/security/cve/CVE-2015-8812"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020452 for CVE-2015-8812",
          "url": "https://bugzilla.suse.com/1020452"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1115893 for CVE-2015-8812",
          "url": "https://bugzilla.suse.com/1115893"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 966437 for CVE-2015-8812",
          "url": "https://bugzilla.suse.com/966437"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 966683 for CVE-2015-8812",
          "url": "https://bugzilla.suse.com/966683"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-default-4-2.1.x86_64",
            "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-xen-4-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-default-4-2.1.x86_64",
            "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-xen-4-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-04-14T14:31:11Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2015-8812"
    },
    {
      "cve": "CVE-2016-0774",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-0774"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux package before 3.2.73-2+deb7u3 on Debian wheezy and the kernel package before 3.10.0-229.26.2 on Red Hat Enterprise Linux (RHEL) 7.1 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which allows local users to cause a denial of service (system crash) or possibly gain privileges via a crafted application, aka an \"I/O vector array overrun.\" NOTE: this vulnerability exists because of an incorrect fix for CVE-2015-1805.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-default-4-2.1.x86_64",
          "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-xen-4-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-0774",
          "url": "https://www.suse.com/security/cve/CVE-2016-0774"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 917839 for CVE-2016-0774",
          "url": "https://bugzilla.suse.com/917839"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 964730 for CVE-2016-0774",
          "url": "https://bugzilla.suse.com/964730"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 964732 for CVE-2016-0774",
          "url": "https://bugzilla.suse.com/964732"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-default-4-2.1.x86_64",
            "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-xen-4-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.8,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-default-4-2.1.x86_64",
            "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-xen-4-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-04-14T14:31:11Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-0774"
    },
    {
      "cve": "CVE-2016-2384",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-2384"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Double free vulnerability in the snd_usbmidi_create function in sound/usb/midi.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (panic) or possibly have unspecified other impact via vectors involving an invalid USB descriptor.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-default-4-2.1.x86_64",
          "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-xen-4-2.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-2384",
          "url": "https://www.suse.com/security/cve/CVE-2016-2384"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1020452 for CVE-2016-2384",
          "url": "https://bugzilla.suse.com/1020452"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 966693 for CVE-2016-2384",
          "url": "https://bugzilla.suse.com/966693"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 967773 for CVE-2016-2384",
          "url": "https://bugzilla.suse.com/967773"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-default-4-2.1.x86_64",
            "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-xen-4-2.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-default-4-2.1.x86_64",
            "SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_48-52_27-xen-4-2.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-04-14T14:31:11Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-2384"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.