Ubuntu 14.04 LTS : Linux kernel vulnerabilities (USN-3422-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3422-1 advisory. It was discovered that a buffer overflow existed in the Bluetooth stack of the Linux kernel when handling L2CAP configuration responses. A physically...

USN-3422-2: Linux kernel (Trusty HWE) vulnerabilities

USN-3422-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement HWE kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 LTS. It was discovered that a buffer overflow existed in the Bluetooth stack of the Linux...

USN-3422-1: Linux kernel vulnerabilities

It was discovered that a buffer overflow existed in the Bluetooth stack of the Linux kernel when handling L2CAP configuration responses. A physically proximate attacker could use this to cause a denial of service system crash. CVE-2017-1000251 It was discovered that the asynchronous I/O aio...

kernel: NULL pointer dereference in keyring_search_aux function

The keyringsearchaux function in security/keys/keyring.c in the Linux kernel allows local users to cause a denial of service via a requestkey system call for the "dead" key type...

kernel: security: The built-in keyrings for security tokens can be joined as a session and then modified by the root user

It was discovered that root can gain direct access to an internal keyring, such as '.dnsresolver' in RHEL-7 or '.builtintrustedkeys' upstream, by joining it as its session keyring. This allows root to bypass module signature verification by adding a new public key of its own devising to the keyri...

Scientific Linux Security Update : kernel on SL7.x x86_64 (20170801)

Security Fixes : - An use-after-free flaw was found in the Linux kernel which enables a race condition in the L2TPv3 IP Encapsulation feature. A local user could use this flaw to escalate their privileges or crash the system. CVE-2016-10200, Important - A flaw was found that can be triggered in...

Fedora 26 : torbrowser-launcher (2017-c535f23493)

Automatically refresh GPG keyring, to prevent signature verification false positives Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

Fedora 25 : torbrowser-launcher (2017-866fc566e0)

Automatically refresh GPG keyring, to prevent signature verification false positives Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible...

RHEL 6 : MRG (RHSA-2017:2444)

An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise MRG 2. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

kernel: Null pointer dereference in search_keyring

A flaw was found that can be triggered in keyringsearchiterator in keyring.c if type-match is NULL. A local user could use this flaw to crash the system or, potentially, escalate their privileges...

kernel: Null pointer dereference in search_keyring

A flaw was found that can be triggered in keyringsearchiterator in keyring.c if type-match is NULL. A local user could use this flaw to crash the system or, potentially, escalate their privileges...

Important: Red Hat Security Advisory: kernel security and bug fix update

An update for kernel is now available for Red Hat Enterprise Linux 7.3 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHEL 7 : kernel-rt (RHSA-2017:2077)

"The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2077 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism...

kernel: security: The built-in keyrings for security tokens can be joined as a session and then modified by the root user

It was discovered that root can gain direct access to an internal keyring, such as '.dnsresolver' in RHEL-7 or '.builtintrustedkeys' upstream, by joining it as its session keyring. This allows root to bypass module signature verification by adding a new public key of its own devising to the keyri...

kernel: NULL pointer dereference in keyring_search_aux function

The keyringsearchaux function in security/keys/keyring.c in the Linux kernel allows local users to cause a denial of service via a requestkey system call for the "dead" key type...

kernel: Null pointer dereference in search_keyring

A flaw was found that can be triggered in keyringsearchiterator in keyring.c if type-match is NULL. A local user could use this flaw to crash the system or, potentially, escalate their privileges...

kernel: NULL pointer dereference in keyring_search_aux function

The keyringsearchaux function in security/keys/keyring.c in the Linux kernel allows local users to cause a denial of service via a requestkey system call for the "dead" key type...

kernel: security: The built-in keyrings for security tokens can be joined as a session and then modified by the root user

It was discovered that root can gain direct access to an internal keyring, such as '.dnsresolver' in RHEL-7 or '.builtintrustedkeys' upstream, by joining it as its session keyring. This allows root to bypass module signature verification by adding a new public key of its own devising to the keyri...

kernel: Null pointer dereference in search_keyring

A flaw was found that can be triggered in keyringsearchiterator in keyring.c if type-match is NULL. A local user could use this flaw to crash the system or, potentially, escalate their privileges...