Oval Definition:	oval:org.opensuse.security:def:201717053
Revision Date: 2022-09-02 Version: 1 Title: CVE-2017-17053 Description: The init_new_context function in arch/x86/include/asm/mmu_context.h in the Linux kernel before 4.12.10 does not correctly handle errors from LDT table allocation when forking a new process, allowing a local attacker to achieve a use-after-free or possibly have unspecified other impact by running a specially crafted program. This vulnerability only affected kernels built with CONFIG_MODIFY_LDT_SYSCALL=y. Family: unix Class: vulnerability Status: Reference(s): CVE-2017-17053 SUSE-SU-2018:2413-1 Mitre CVE-2017-17053 SUSE CVE-2017-17053 SUSE-SU-2018:2413-1 Platform(s): SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise Micro 5.0 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 Product(s): Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP3 is installed AND Package Information kgraft-patch-4_4_82-6_3-default-11-2.1 is installed OR kgraft-patch-4_4_82-6_6-default-10-2.1 is installed OR kgraft-patch-4_4_82-6_9-default-10-2.1 is installed Definition Synopsis SUSE Linux Enterprise Micro 5.0 is installed AND kernel-default is not affected Definition Synopsis Release Information SUSE Linux Enterprise High Performance Computing 12 SP5 is installed OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed AND kernel-default is not affected OR kernel-source is not affected OR Package Information SUSE Linux Enterprise Server 12 SP5 is installed AND kernel-default is not affected OR kernel-default-base is not affected OR kernel-default-devel is not affected OR kernel-default-man is not affected OR kernel-devel is not affected OR kernel-macros is not affected OR kernel-source is not affected Definition Synopsis Release Information SUSE Linux Enterprise Desktop 12 SP4 is installed OR SUSE Linux Enterprise Server 12 SP4 is installed AND kernel-default is not affected OR kernel-source is not affected OR Package Information SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed AND kernel-default is not affected OR kernel-default-base is not affected OR kernel-default-devel is not affected OR kernel-devel is not affected OR kernel-macros is not affected OR kernel-source is not affected
BACK