ALT-PU-2017-2771: package kernel-image-un-def update to version 4.14.4-alt1
Описание
This update upgrades kernel-image-un-def to version 4.14.4-alt1.
Устраненные уязвимости19
Связанные уязвимости
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2011-1160, CVE-2011-1162. Reason: This candidate was withdrawn by its CNA. Further investigation showed that only two candidates, CVE-2011-1160 and CVE-2011-1162, were needed for the set of security issues in question. Notes: none
ALT-PU-2018-1407: package `kernel-image-std-def` update to version 4.9.87-alt1
ALT-PU-2017-2697: package `kernel-image-un-def` update to version 4.13.16-alt1
The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.
The walk_hugetlb_range function in mm/pagewalk.c in the Linux kernel before 4.14.2 mishandles holes in hugetlb ranges, which allows local users to obtain sensitive information from uninitialized kernel memory via crafted use of the mincore() system call.