This update for the Linux Kernel 3.12.61-52_80 fixes several issues.
The following security bugs were fixed :

  - CVE-2017-7533: A bug in inotify code allowed local users     to escalate privilege (bsc#1050751).

  - CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd     subsystem in the Linux kernel allowed remote attackers     to cause a denial of service (system crash) via a long     RPC reply, related to net/sunrpc/svc.c,     fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191).

  - CVE-2017-9242: The __ip6_append_data function in     net/ipv6/ip6_output.c in the Linux kernel is too late in     checking whether an overwrite of an skb data structure     may occur, which allowed local users to cause a denial     of service (system crash) via crafted system calls     (bsc#1042892).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for the Linux Kernel 3.12.61-52_72 fixes several issues.
The following security bugs were fixed :

  - CVE-2017-7533: A bug in inotify code allowed local users     to escalate privilege (bsc#1050751).

  - CVE-2017-7645: The NFSv2/NFSv3 server in the nfsd     subsystem in the Linux kernel allowed remote attackers     to cause a denial of service (system crash) via a long     RPC reply, related to net/sunrpc/svc.c,     fs/nfsd/nfs3xdr.c, and fs/nfsd/nfsxdr.c (bsc#1046191).

  - A SUSE Linux Enterprise specific regression in tearing     down network namespaces was fixed (bsc#1044878)

  - CVE-2017-9242: The __ip6_append_data function in     net/ipv6/ip6_output.c in the Linux kernel is too late in     checking whether an overwrite of an skb data structure     may occur, which allowed local users to cause a denial     of service (system crash) via crafted system calls     (bsc#1042892).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Buffer overflow in mp_override_legacy_irq() :

Buffer overflow in the mp_override_legacy_irq() function in arch/x86/kernel/acpi/boot.c in the Linux kernel through 4.12.2 allows local users to gain privileges via a crafted ACPI table.
(CVE-2017-11473)

A race between inotify_handle_event() and sys_rename() :

A race condition was found in the Linux kernel, present since v3.14-rc1 through v4.12. The race happens between threads of inotify_handle_event() and vfs_rename() while running the rename operation against the same file. As a result of the race the next slab data or the slab's free list pointer can be corrupted with attacker-controlled data, which may lead to the privilege escalation.
(CVE-2017-7533)

Integer overflow in ip6_find_1stfragopt() causes infinite loop :

An integer overflow vulnerability in ip6_find_1stfragopt() function was found. A local attacker that has privileges (of CAP_NET_RAW) to open raw socket can cause an infinite loop inside the ip6_find_1stfragopt() function.(CVE-2017-7542)

Double fetch vulnerability in saa7164_bus_get function The saa7164_bus_get function in drivers/media/pci/saa7164/saa7164-bus.c in the Linux kernel through 4.10.14 allows local users to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact by changing a certain sequence-number value, aka a 'double fetch' vulnerability. Please note, the saa7164 driver is not enabled in the Amazon Linux AMI kernel (CVE-2017-8831)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3377-2 advisory.

    USN-3377-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04. This update provides the     corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.04 for Ubuntu 16.04     LTS.

    Fan Wu and Shixiong Zhao discovered a race condition between inotify events and vfs rename operations in     the Linux kernel. An unprivileged local attacker could use this to cause a denial of service (system     crash) or execute arbitrary code. (CVE-2017-7533)

    It was discovered that the Linux kernel did not properly restrict RLIMIT_STACK size. A local attacker     could use this in conjunction with another vulnerability to possibly execute arbitrary code.
    (CVE-2017-1000365)

     discovered that the Virtio GPU driver in the Linux kernel did not properly free memory in some     situations. A local attacker could use this to cause a denial of service (memory consumption).
    (CVE-2017-10810)

     discovered that the RxRPC Kerberos 5 ticket handling code in the Linux kernel did not properly     verify metadata. A remote attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2017-7482)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3378-1 advisory.

    Fan Wu and Shixiong Zhao discovered a race condition between inotify events and vfs rename operations in     the Linux kernel. An unprivileged local attacker could use this to cause a denial of service (system     crash) or execute arbitrary code. (CVE-2017-7533)

    It was discovered that the Linux kernel did not properly restrict RLIMIT_STACK size. A local attacker     could use this in conjunction with another vulnerability to possibly execute arbitrary code.
    (CVE-2017-1000365)

     discovered that the Virtio GPU driver in the Linux kernel did not properly free memory in some     situations. A local attacker could use this to cause a denial of service (memory consumption).
    (CVE-2017-10810)

     discovered that the RxRPC Kerberos 5 ticket handling code in the Linux kernel did not properly     verify metadata. A remote attacker could use this to cause a denial of service (system crash) or possibly     execute arbitrary code. (CVE-2017-7482)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 4.12.8 stable kernel update contains a number of important fixes across the tree.

----

The 4.12.5 kernel rebase contains new features and many bug fixes across the tree.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
102316	SUSE SLES12 Security Update : kernel (SUSE-SU-2017:2098-1)	Nessus	SuSE Local Security Checks	8/9/2017	1/6/2021	high
102318	SUSE SLES12 Security Update : kernel (SUSE-SU-2017:2100-1)	Nessus	SuSE Local Security Checks	8/9/2017	1/6/2021	high
102544	Amazon Linux AMI : kernel (ALAS-2017-870)	Nessus	Amazon Linux Local Security Checks	8/18/2017	4/10/2019	high
102196	Ubuntu 16.04 LTS : Linux kernel (HWE) vulnerabilities (USN-3377-2)	Nessus	Ubuntu Local Security Checks	8/4/2017	8/27/2024	high
102197	Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-3378-1)	Nessus	Ubuntu Local Security Checks	8/4/2017	8/27/2024	high
102718	Fedora 25 : kernel (2017-73f71456d7)	Nessus	Fedora Local Security Checks	8/24/2017	1/6/2021	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high