Philip Pettersson discovered that the Linux kernel's ASN.1 DER decoder did not properly process certificate files with tags of indefinite length. A local unprivileged attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code with administrative privileges.
{ "availability": "No subscription required", "binaries": [ { "binary_version": "4.4.0-1013.15", "binary_name": "linux-headers-4.4.0-1013-snapdragon" }, { "binary_version": "4.4.0-1013.15", "binary_name": "linux-image-4.4.0-1013-snapdragon" }, { "binary_version": "4.4.0-1013.15", "binary_name": "linux-image-4.4.0-1013-snapdragon-dbgsym" }, { "binary_version": "4.4.0-1013.15", "binary_name": "linux-snapdragon-headers-4.4.0-1013" }, { "binary_version": "4.4.0-1013.15", "binary_name": "linux-snapdragon-tools-4.4.0-1013" }, { "binary_version": "4.4.0-1013.15", "binary_name": "linux-snapdragon-tools-4.4.0-1013-dbgsym" }, { "binary_version": "4.4.0-1013.15", "binary_name": "linux-tools-4.4.0-1013-snapdragon" } ] }