Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:0336-1

Опубликовано: 04 фев. 2016
Источник: suse-cvrf

Описание

Security update for kernel live patch 9

This kernel live patch for Linux Kernel 3.12.51-52.31.1 fixes a security issue:

Security issues fixed:

  • CVE-2015-8539: A negatively instantiated user key could have been used by a local user to leverage privileges (bnc#958601).

Список пакетов

SUSE Linux Enterprise Live Patching 12
kgraft-patch-3_12_51-52_31-default-2-2.1
kgraft-patch-3_12_51-52_31-xen-2-2.1

Ссылки

Описание

The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BUG) via crafted keyctl commands that negatively instantiate a key, related to security/keys/encrypted-keys/encrypted.c, security/keys/trusted.c, and security/keys/user_defined.c.

Затронутые продукты
SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-default-2-2.1
SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_31-xen-2-2.1
Ссылки