CVE-2016-5195: kernel: local privilege escalation using MAP_PRIVATE (Dirty COW).

This document (7018178) is provided subject to the disclaimer at the end of this document.

Environment

SUSE Linux Enterprise Server 12 Service Pack 1 (SLES 12 SP1)
SUSE Linux Enterprise Server 12 GA LTSS (SLES 12 GA LTSS)

SUSE Linux Enterprise Server 11 Service Pack 4 (SLES 11 SP4)
SUSE Linux Enterprise Server 11 Service Pack 3 LTSS (SLES 11 SP3 LTSS)
SUSE Linux Enterprise Server 11 Service Pack 2 LTSS (SLES 11 SP2 LTSS)

Expanded Support 5 (RES 5) - probably not affected
Expanded Support 6 (RES 6) - probably not affected
Expanded Support 7 (RES 7)

SUSE Linux Enterprise Server 10 is most probably not affected.

Situation

A race condition was found in the way the Linux kernel's memory subsystem handles the copy-on-write (COW) breakage of private read-only memory mappings.

An unprivileged local user could use this flaw to gain write access to otherwise read-only files and thus increase their privileges on the system.

Resolution

SUSE has released updates to fix this security issue.

SLES 12 SP1

kernel-* >= 3.12.62-60.64.8.2
release date: 21st October 2016

SLES 12 GA LTSS

kernel-* >= 3.12.60-52.57.1
release date: 21st October 2016

SLES 11 SP4

kernel-* >= 3.0.101-84.1
release date: 21st October 2016

SLES 10

Existing LTSS customer can still request a PTF through support

Expanded Support 5 (RES5)

kernel patch has been released on 26th of October 2016

Expanded Support 6 (RES6)

kernel patch has been released on 26th of October 2016

Expanded Support 7 (RES7)

kernel patch has been released on 26th of October 2016

For systems out of general support, like SLES11 SP3 LTSS, please contact support and/or your Sales representative if Long Term ServicePack Support (LTSS) is necessary.

SUSE recommends to patch all affected systems as soon as possible.

Cause

Additional Information

CVE-2016-5195

Further information can be found here

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.