Все бюллетени/t7/ALT-PU-2015-1067-1
ALT-PU-2015-1067-1

Обновление пакета kernel-image-un-def в ветке t7

Версия3.18.3-alt1
Задание#138962
Опубликовано2015-01-20
Макс. серьёзностьMEDIUM
Серьёзность:

Закрытые проблемы (2)

CVE-2014-9529
MEDIUM6.9

Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 3.18.2 allows local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other impact via keyctl commands that trigger access to a key structure member during garbage collection of a key.

Опубликовано: 2015-01-09Изменено: 2025-04-12
CVSS 2.0СРЕДНЯЯ 6.9
CVSS:2.0/AV:L/AC:M/Au:N/C:C/I:C/A:C
Ссылки
CVE-2014-9585
LOW2.1

The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism by guessing a location at the end of a PMD.

Опубликовано: 2015-01-09Изменено: 2025-04-12
CVSS 2.0НИЗКАЯ 2.1
CVSS:2.0/AV:L/AC:L/Au:N/C:N/I:P/A:N
Ссылки