SUSE-SU-2015:0832-1

See a problem?
Please try reporting it to the source first.
Source
https://www.suse.com/support/update/announcement/2015/suse-su-20150832-1/
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2015:0832-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2015:0832-1
Related
Published
2015-04-01T14:12:12Z
Modified
2015-04-01T14:12:12Z
Summary
Security update for kgraft-patch-SLE12_Update_1, kgraft-patch-SLE12_Update_2
Details

This update supplies kgraft patches to fix one security vulnerability.

CVE-2015-1421: A use-after-free vulnerability in the sctpassocupdate function in net/sctp/associola.c in the Linux kernel allowed remote attackers to cause a denial of service (slab corruption and panic) or possibly have unspecified other impact by triggering an INIT collision that leads to improper handling of shared-key data.

This patch supplies kgraft patches for the first kernel update and the second kernel update published for SUSE Linux Enterprise Server 12. The third kernel update contains the patch already.

References

Affected packages

SUSE:Linux Enterprise Live Patching 12 / kgraft-patch-SLE12_Update_1

Package

Name
kgraft-patch-SLE12_Update_1
Purl
purl:rpm/suse/kgraft-patch-SLE12_Update_1&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2-3.1

Ecosystem specific 

{
    "binaries": [
        {
            "kgraft-patch-3_12_36-38-xen": "2-3.1",
            "kgraft-patch-3_12_32-33-xen": "2-3.1",
            "kgraft-patch-3_12_36-38-default": "2-3.1",
            "kgraft-patch-3_12_32-33-default": "2-3.1"
        }
    ]
}

SUSE:Linux Enterprise Live Patching 12 / kgraft-patch-SLE12_Update_2

Package

Name
kgraft-patch-SLE12_Update_2
Purl
purl:rpm/suse/kgraft-patch-SLE12_Update_2&distro=SUSE%20Linux%20Enterprise%20Live%20Patching%2012

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2-3.1

Ecosystem specific 

{
    "binaries": [
        {
            "kgraft-patch-3_12_36-38-xen": "2-3.1",
            "kgraft-patch-3_12_32-33-xen": "2-3.1",
            "kgraft-patch-3_12_36-38-default": "2-3.1",
            "kgraft-patch-3_12_32-33-default": "2-3.1"
        }
    ]
}