Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2016:0341-1

Опубликовано: 04 фев. 2016
Источник: suse-cvrf

Описание

Security update for Kernel live patch 10

This kernel live patch for Linux Kernel 3.12.51-52.34.1 fixes one security issue:

  • A reference leak in keyring handling with join_session_keyring() could lead to local attackers gain root privileges. (bsc#962075, CVE-2016-0728).

Список пакетов

SUSE Linux Enterprise Live Patching 12
kgraft-patch-3_12_51-52_34-default-2-2.1
kgraft-patch-3_12_51-52_34-xen-2-2.1

Ссылки

Описание

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object references in a certain error case, which allows local users to gain privileges or cause a denial of service (integer overflow and use-after-free) via crafted keyctl commands.

Затронутые продукты
SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_34-default-2-2.1
SUSE Linux Enterprise Live Patching 12:kgraft-patch-3_12_51-52_34-xen-2-2.1
Ссылки