Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2016-2082

Высокий

ALT-PU-2016-2082: package kernel-image-un-def update to version 4.7.7-alt1

Источник
errata.altlinux.org
Дата публикации
10.10.2016
Дата обновления
10.10.2016
Устраненные уязвимости
3

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades kernel-image-un-def to version 4.7.7-alt1.

Устраненные уязвимости3

Связанные уязвимости

CVSS3: 7.8
ubuntu
почти 10 лет назад

The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup system call.

CVSS3: 7
redhat
около 10 лет назад

The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup system call.

CVSS3: 7.8
nvd
почти 10 лет назад

The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup system call.

CVSS3: 7.8
debian
почти 10 лет назад

The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 do ...

CVSS3: 6.6
ubuntu
больше 9 лет назад

The cp_report_fixup function in drivers/hid/hid-cypress.c in the Linux kernel 3.2 and 4.x before 4.9.4 allows physically proximate attackers to cause a denial of service (integer underflow) or possibly have unspecified other impact via a crafted HID report.