ALT Linux Team

Branch p8 update on 2020-05-13

2020-05-13

ALT-BU-2020-3807-1

Branch p8 update bulletin.

ALT-PU-2020-1936-1

Package kernel-image-std-def updated to version 4.9.222-alt0.M80P.1 for branch p8 in task 251240.

Closed vulnerabilities

Published: 2020-05-04

BDU:2020-02427

Уязвимость функции pivot_root (fs/namespace.c) ядра операционных систем Linux, позволяющая нарушителю вызвать отказ в обслуживании

Severity: MEDIUM (4.7) Vector: AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Severity: LOW (3.8) Vector: AV:L/AC:H/Au:S/C:N/I:N/A:C
References:
Published: 2020-05-04
Modified: 2024-11-21

CVE-2020-12114

A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x before 5.3 allows local users to cause a denial of service (panic) by corrupting a mountpoint reference counter.

Severity: LOW (1.9) Vector: AV:L/AC:M/Au:N/C:N/I:N/A:P
Severity: MEDIUM (4.7) Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
References:
VKontakte | Telegram | YouTube | Forum | GitHub | Bugzilla
Version: 2.1.2
Back to top