Все бюллетени/p8/ALT-PU-2017-1024-1
ALT-PU-2017-1024-1

Обновление пакета kernel-image-un-def в ветке p8

Версия4.8.17-alt0.M80P.1
Задание#175992
Опубликовано2017-01-11
Макс. серьёзностьHIGH
Серьёзность:

Закрытые проблемы (1)

CVE-2016-10088
HIGH7.0

The sg implementation in the Linux kernel through 4.9 does not properly restrict write operations in situations where the KERNEL_DS option is set, which allows local users to read or write to arbitrary kernel memory locations or cause a denial of service (use-after-free) by leveraging access to a /dev/sg device, related to block/bsg.c and drivers/scsi/sg.c. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-9576.

Опубликовано: 2016-12-30Изменено: 2025-04-12
CVSS 2.0СРЕДНЯЯ 6.9
CVSS:2.0/AV:L/AC:M/Au:N/C:C/I:C/A:C
CVSS 3.xВЫСОКАЯ 7.0
CVSS:3.x/CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H