MGASA-2017-0088
- Source
- https://advisories.mageia.org/MGASA-2017-0088.html
- Import Source
- https://advisories.mageia.org/MGASA-2017-0088.json
- JSON Data
- https://api.osv.dev/v1/vulns/MGASA-2017-0088
- Related
- Published
- 2017-03-25T20:15:34Z
- Modified
- 2022-02-17T18:21:47Z
- Summary
- Updated kernel packages fixes security vulnerabilities
- Details
-
This kernel update is based on upstream 4.4.55 and fixes at least the following security issues:
Race condition in drivers/tty/n_hdlc.c in the Linux kernel through 4.10.1 allows local users to gain privileges or cause a denial of service (double free) by setting the HDLC line discipline (CVE-2017-2636).
Race condition in net/packet/afpacket.c in the Linux kernel before 4.9.13 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via a multithreaded application that makes PACKETFANOUT setsockopt system calls (CVE-2017-6346).
The ipcmsgrecvchecksum function in net/ipv4/ipsockglue.c in the Linux kernel before 4.10.1 has incorrect expectations about skb data layout, which allows local users to cause a denial of service (buffer over-read) or possibly have unspecified other impact via crafted system calls, as demonstrated by use of the MSG_MORE flag in conjunction with loopback UDP transmission (CVE-2017-6347).
The hashbin_delete function in net/irda/irqueue.c in the Linux kernel before 4.9.13 improperly manages lock dropping, which allows local users to cause a denial of service (deadlock) via crafted operations on IrDA devices (CVE-2017-6348).
For other upstream fixes in this update, see the referenced changelogs.
- References
-
- https://advisories.mageia.org/MGASA-2017-0088.html
- https://bugs.mageia.org/show_bug.cgi?id=20527
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.51
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.52
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.53
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.54
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.55
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:5 / kernel
Package
- Name
- kernel
- Purl
- pkg:rpm/mageia/kernel?distro=mageia-5
Mageia:5 / kernel-userspace-headers
Package
- Name
- kernel-userspace-headers
- Purl
- pkg:rpm/mageia/kernel-userspace-headers?distro=mageia-5
Mageia:5 / kmod-vboxadditions
Package
- Name
- kmod-vboxadditions
- Purl
- pkg:rpm/mageia/kmod-vboxadditions?distro=mageia-5
Mageia:5 / kmod-virtualbox
Package
- Name
- kmod-virtualbox
- Purl
- pkg:rpm/mageia/kmod-virtualbox?distro=mageia-5
Mageia:5 / kmod-xtables-addons
Package
- Name
- kmod-xtables-addons
- Purl
- pkg:rpm/mageia/kmod-xtables-addons?distro=mageia-5