ALT-PU-2017-2545-1
Package kernel-image-std-def updated to version 4.9.59-alt0.M80P.1 for branch p8 in task 192379.
Closed vulnerabilities
Published: 2017-10-18
BDU:2017-02573
Уязвимость подсистемы KEYS ядра операционной системы Linux, позволяющая нарушителю вызвать отказ в обслуживании или оказать другое воздействие
Severity: HIGH (7.8)
Vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References:
Published: 2017-10-28
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2017-15951
The KEYS subsystem in the Linux kernel before 4.13.10 does not correctly synchronize the actions of updating versus finding a key in the "negative" state to avoid a race condition, which allows local users to cause a denial of service or possibly have unspecified other impact via crafted system calls.
Severity: HIGH (7.8)
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References:
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=363b02dab09b3226f3bd1420dad9c72b79a42a76
- http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=363b02dab09b3226f3bd1420dad9c72b79a42a76
- http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.10
- http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.13.10
- 101621
- 101621
- https://github.com/torvalds/linux/commit/363b02dab09b3226f3bd1420dad9c72b79a42a76
- https://github.com/torvalds/linux/commit/363b02dab09b3226f3bd1420dad9c72b79a42a76