Поиск уязвимостей

The capabilities implementation in the Linux kernel before 3.14.8 does not properly consider that namespaces are inapplicable to inodes, which allows local users to bypass intended chmod restrictions by first creating a user namespace, as demonstrated by setting the setgid bit on a file with group ownership of root.

ALT-PU-2014-1753: package `kernel-image-el7-def` update to version 3.10.0-alt5

ALT-PU-2014-1738: package `kernel-image-led-vs` update to version 3.14.5-alt5

ALT-PU-2014-1733: package `kernel-image-led-ws` update to version 3.14.5-alt5

Security update for Linux kernel

ALT-PU-2014-2064: package `kernel-image-std-def` update to version 3.14.17-alt1

The report_fixup functions in the HID subsystem in the Linux kernel before 3.16.2 might allow physically proximate attackers to cause a denial of service (out-of-bounds write) via a crafted device that provides a small report descriptor, related to (1) drivers/hid/hid-cherry.c, (2) drivers/hid/hid-kye.c, (3) drivers/hid/hid-lg.c, (4) drivers/hid/hid-monterey.c, (5) drivers/hid/hid-petalynx.c, and (6) drivers/hid/hid-sunplus.c.

mm/shmem.c in the Linux kernel through 3.15.1 does not properly implement the interaction between range notification and hole punching, which allows local users to cause a denial of service (i_mutex hold) by using the mmap system call to access a hole, as demonstrated by interfering with intended shmem activity by blocking completion of (1) an MADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call.

mm/shmem.c in the Linux kernel through 3.15.1 does not properly implement the interaction between range notification and hole punching, which allows local users to cause a denial of service (i_mutex hold) by using the mmap system call to access a hole, as demonstrated by interfering with intended shmem activity by blocking completion of (1) an MADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call.

mm/shmem.c in the Linux kernel through 3.15.1 does not properly implement the interaction between range notification and hole punching, which allows local users to cause a denial of service (i_mutex hold) by using the mmap system call to access a hole, as demonstrated by interfering with intended shmem activity by blocking completion of (1) an MADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call.

mm/shmem.c in the Linux kernel through 3.15.1 does not properly implem ...

mm/shmem.c in the Linux kernel through 3.15.1 does not properly implement the interaction between range notification and hole punching, which allows local users to cause a denial of service (i_mutex hold) by using the mmap system call to access a hole, as demonstrated by interfering with intended shmem activity by blocking completion of (1) an MADV_REMOVE madvise call or (2) an FALLOC_FL_PUNCH_HOLE fallocate call.

ELSA-2014-3105: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2015-1272: kernel security, bug fix, and enhancement update (MODERATE)

ALT-PU-2014-2106: package `kernel-image-un-def` update to version 3.16.2-alt1

ALT-PU-2014-1765: package `kernel-image-un-def` update to version 3.14.6-alt1

ELSA-2015-0102: kernel security and bug fix update (IMPORTANT)

ALT-PU-2015-1794: package `kernel-image-std-def` update to version 3.18.21-alt1

ALT-PU-2014-1779: package `kernel-image-led-xen` update to version 3.14.7-alt1

ALT-PU-2014-1778: package `kernel-image-led-vs` update to version 3.14.7-alt1