Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP1)
This update for the Linux Kernel 3.12.74-60_64_93 fixes several issues. The following security issues were fixed: - CVE-2018-9568: Prevent possible memory corruption due to type confusion in sk_clone_lock. This could lead to local privilege escalation (bsc#1118319). - CVE-2018-5848: Fixed an unsigned integer overflow in wmi_set_ie. This could lead to a buffer overflow (bsc#1097356).
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for the Linux Kernel 3.12.74-60_64_93 fixes several issues. The following security issues were fixed: - CVE-2018-9568: Prevent possible memory corruption due to type confusion in sk_clone_lock. This could lead to local privilege escalation (bsc#1118319). - CVE-2018-5848: Fixed an unsigned integer overflow in wmi_set_ie. This could lead to a buffer overflow (bsc#1097356).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1097356
- https://bugzilla.suse.com/1115339
- https://bugzilla.suse.com/1118319
- https://bugzilla.suse.com/1118320
- https://www.suse.com/security/cve/CVE-2018-5848
- https://www.suse.com/security/cve/CVE-2018-9568
- https://www.suse.com/support/update/announcement/2018/suse-su-20184157-1/