ALT-PU-2017-2808-1

Package update kernel-image-std-pae in branch sisyphus

Version4.4.106-alt1

Published2017-12-17

Max severityHIGH

Severity:

Closed issues (2)

HIGH7.8

Use-after-free vulnerability in the snd_pcm_info function in the ALSA subsystem in the Linux kernel allows attackers to gain privileges via unspecified vectors.

Published: 2017-11-16Modified: 2025-04-20

CVSS 2.0MEDIUM 4.6

CVSS:2.0/AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS 3.xHIGH 7.8

CVSS:3.x/CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

CVE-2017-1000407

HIGH7.4

The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exception can be triggered leading to a kernel panic.

Published: 2017-12-11Modified: 2025-04-20

CVSS 2.0MEDIUM 6.1

CVSS:2.0/AV:A/AC:L/Au:N/C:N/I:N/A:C

CVSS 3.xHIGH 7.4

CVSS:3.x/CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

References