Security update for Kernel live patch 10

SUSE Security Update: Security update for Kernel live patch 10
Announcement ID: SUSE-SU-2016:0341-1
Rating: important
References: #962078
Affected Products:
  • SUSE Linux Enterprise Live Patching 12
    		•

    An update that fixes one vulnerability is now available.

    Description:


    This kernel live patch for Linux Kernel 3.12.51-52.34.1 fixes one security
    issue:

    - A reference leak in keyring handling with join_session_keyring() could
    lead to local attackers gain root privileges. (bsc#962075,
    CVE-2016-0728).

    Patch Instructions:

    To install this SUSE Security Update use YaST online_update.
    Alternatively you can run the command listed for your product:

    • SUSE Linux Enterprise Live Patching 12:
      zypper in -t patch SUSE-SLE-Live-Patching-12-2016-202=1

    To bring your system up-to-date, use "zypper patch".

    Package List:

    • SUSE Linux Enterprise Live Patching 12 (x86_64):
      • kgraft-patch-3_12_51-52_34-default-2-2.1
      • kgraft-patch-3_12_51-52_34-xen-2-2.1

    References: