SB2016102706 - SUSE Linux update for Linux Kernel Live Patch 13 for SLE 12 



SB2016102706 - SUSE Linux update for Linux Kernel Live Patch 13 for SLE 12

Published: October 27, 2016 Updated: December 15, 2022

Security Bulletin ID SB2016102706
Severity
Medium
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Local access
Highest impact Code execution

Breakdown by Severity

High 50% Medium 50%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Memory corruption (CVE-ID: CVE-2016-4997)

The vulnerability allows a local user to obtain elevated privileges on the target system.

The vulnerability exists due to a memory corruption error in the IPT_SO_SET_REPLACE compat_setsockopt() function.

Successful exploitation of this vulnerability may lead to arbitrary code execution with kernel-level privileges.

2) Privilege escalation (CVE-ID: CVE-2016-5195)

The vulnerability allows a  local user to obtain elevated privileges on the target system.
The weakness is due to race condition in the kernel memory subsystem in the management of copy-on-write operations on read-only memory mappings that lets attackers to overwrite kernel memory and gain kernel-level privileges.
Successful exploitation of the vulnerability results in gaining of root privileges on the vulnerable system.

Note: the vulnerability was being actively exploited.

Remediation

Install update from vendor's website.