Поиск уязвимостей

arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the (1) fork or (2) close system call, as demonstrated by an attack against seccomp before 3.16.

arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not ...

ELSA-2015-3020: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2015-3019: Unbreakable Enterprise kernel security update (IMPORTANT)

The xsave/xrstor implementation in arch/x86/include/asm/xsave.h in the Linux kernel before 3.19.2 creates certain .altinstr_replacement pointers and consequently does not provide any protection against instruction faulting, which allows local users to cause a denial of service (panic) by triggering a fault, as demonstrated by an unaligned memory operand or a non-canonical address memory operand.

arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a crafted application that uses the (1) fork or (2) close system call, as demonstrated by an attack against seccomp before 3.16.

ELSA-2015-3047: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2015-3046: Unbreakable Enterprise kernel security update (IMPORTANT)

ELSA-2015-3045: Unbreakable Enterprise kernel security update (IMPORTANT)

Security update for Linux kernel

Security update for Linux kernel

Security update for Linux kernel

Security update for Linux kernel

Security update for Linux kernel

ELSA-2015-1221: kernel security, bug fix, and enhancement update (MODERATE)

ELSA-2015-1137: kernel security and bug fix update (IMPORTANT)

ALT-PU-2014-3201: package `xen` update to version 4.3.2-alt1

Security update for the Linux Kernel

ALT-PU-2016-3288: package `xen` update to version 4.7.0-alt1