← Search the atlas
SUSE-SU-2019:0356-1
Not scored
Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP2)
This update for the Linux Kernel 4.4.121-92_95 fixes one issue.
The following security issue was fixed:
- CVE-2018-16884: A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time could make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user could cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out (bsc#1119947).
Exploit probability
Not scored
Published
February 13, 2019
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
SUSE:Linux Enterprise Server 12 SP1-LTSS
kgraft-patch-SLE12-SP1_Update_25
SUSE:Linux Enterprise Server 12 SP1-LTSS
kgraft-patch-SLE12-SP1_Update_26
SUSE:Linux Enterprise Server 12 SP1-LTSS
kgraft-patch-SLE12-SP1_Update_27
SUSE:Linux Enterprise Server 12 SP1-LTSS
kgraft-patch-SLE12-SP1_Update_28
SUSE:Linux Enterprise Server 12 SP1-LTSS
kgraft-patch-SLE12-SP1_Update_29
SUSE:Linux Enterprise Server 12 SP1-LTSS
kgraft-patch-SLE12-SP1_Update_30
SUSE:Linux Enterprise Server 12 SP1-LTSS
kgraft-patch-SLE12-SP1_Update_31
SUSE:Linux Enterprise Server 12 SP1-LTSS
kgraft-patch-SLE12-SP1_Update_32
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_18
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_19
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_20
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_21
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_22
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_23
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_24
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_25
SUSE:Linux Enterprise Server 12 SP2-LTSS
kgraft-patch-SLE12-SP2_Update_26
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_18
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_19
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_20
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_21
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_22
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_23
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_24
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_25
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
kgraft-patch-SLE12-SP2_Update_26
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2019:0356-1
This update for the Linux Kernel 4.4.121-92_95 fixes one issue.
The following security issue was fixed:
- CVE-2018-16884: A flaw was found in the Linux kernel's NFS41+ subsystem. NFS41+ shares mounted in different network namespaces at the same time could make bc_svc_process() use wrong back-channel IDs and cause a use-after-free vulnerability. Thus a malicious container user could cause a host kernel memory corruption and a system panic. Due to the nature of the flaw, privilege escalation cannot be fully ruled out (bsc#1119947).
View original source ↗
05 / REFERENCES
Further evidence