USN-2890-1: Linux kernel vulnerabilities

It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollctl calls to cause a denial of service system crash or expose sensitive information. CVE-2013-7446 It was discovered that the KVM implementation ...

Ubuntu 14.04 LTS : Linux kernel (Utopic HWE) vulnerabilities (USN-2888-1)

The remote Ubuntu 14.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-2888-1 advisory. It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollc...

Ubuntu 15.10 : linux vulnerabilities (USN-2890-1)

It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollctl calls to cause a denial of service system crash or expose sensitive information. CVE-2013-7446 It was discovered that the KVM implementation ...

Ubuntu 15.10 : linux-raspi2 vulnerabilities (USN-2890-3)

It was discovered that a use-after-free vulnerability existed in the AFUNIX implementation in the Linux kernel. A local attacker could use crafted epollctl calls to cause a denial of service system crash or expose sensitive information. CVE-2013-7446 It was discovered that the KVM implementation ...

Security update for the Linux Kernel (important)

The Linux kernel for openSUSE Leap 42.1 was updated to the 4.1.15 stable release, and also includes security and bugfixes. Following security bugs were fixed: - CVE-2016-0728: A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc96207...

Exploit for CVE-2016-0728

CVE-2016-0728 testbed This repository contains a test program...

Linux kernel Privilege Escalation

The vulnerability of the joinsessionkeyring function in the Linux operating system’s kernel is related to the use of memory after it is freed. Exploiting this vulnerability can allow a local attacker to increase their privileges and execute arbitrary code on the target system...

kernel: Possible use-after-free vulnerability in keyring facility

A use-after-free flaw was found in the way the Linux kernel's key management subsystem handled keyring object reference counting in certain error path of the joinsessionkeyring function. A local, unprivileged user could use this flaw to escalate their privileges on the system...

Oracle Linux 7 : kernel (ELSA-2016-0064)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-0064 advisory. 3.10.0-327.4.5.OL7 - Oracle Linux certificates Alexey Petrenko 3.10.0-327.4.5 - security keys: Fix keyring ref leak in joinsessionkeyring David Howells 1298931...

kernel: Possible use-after-free vulnerability in keyring facility

A use-after-free flaw was found in the way the Linux kernel's key management subsystem handled keyring object reference counting in certain error path of the joinsessionkeyring function. A local, unprivileged user could use this flaw to escalate their privileges on the system...

kernel: Possible use-after-free vulnerability in keyring facility

A use-after-free flaw was found in the way the Linux kernel's key management subsystem handled keyring object reference counting in certain error path of the joinsessionkeyring function. A local, unprivileged user could use this flaw to escalate their privileges on the system...

kernel security update

3.10.0-327.4.5.OL7 - Oracle Linux certificates Alexey Petrenko 3.10.0-327.4.5 - security keys: Fix keyring ref leak in joinsessionkeyring David Howells 1298931 1298036 CVE-2016-0728...

Mageia: Security Advisory (MGASA-2016-0032)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

linux-lts: privilege escalation

It was reported that possible use-after-free vulnerability in keyring facility, possibly leading to local privilege escalation, was found. Function joinsessionkeyring in security/keys/processkeys.c holds a reference to the requested keyring, but if that keyring is the same as the one being...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:0205-1)

The SUSE Linux Enterprise 12 kernel was updated to receive a security fix. Following security bug was fixed : - A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962075, CVE-2016-0728. Note that Tenable Network Security has extract...

SUSE SLED12 / SLES12 Security Update : kernel (SUSE-SU-2016:0186-1)

The SUSE Linux Enterprise 12 SP1 kernel was updated to receive a security fix. Following security bug was fixed : - A reference leak in keyring handling with joinsessionkeyring could lead to local attackers gain root privileges. bsc962075, CVE-2016-0728. Note that Tenable Network Security has...

Android Devices Linux Zero Day Kernel Vulnerability

Google is downplaying the scope of the critical Linux vulnerability patched this week, suggesting that the number of affected Android devices has been exaggerated. The Android OS is built upon the Linux kernel, but minus many of the libraries that are included in standard Linux builds. Initially,...

MGASA-2016-0033 Updated kernel packages fix security vulnerability

Perception Point Research Team found a reference leak in keyring in joinsessionkeyring that can be exploited to successfully escalate privileges from a local user to root CVE-2016-0728. Other fixes in this kernel update: - netfilter: nfnatredirect: add missing NULL pointer check...

Updated kernel-linus packages fix security vulnerability

Perception Point Research Team found a reference leak in keyring in joinsessionkeyring that can be exploited to successfully escalate privileges from a local user to root CVE-2016-0728...

Updated kernel-tmb packages fix security vulnerability

Perception Point Research Team found a reference leak in keyring in joinsessionkeyring that can be exploited to successfully escalate privileges from a local user to root CVE-2016-0728. Other fixes in this kernel update: - netfilter: nfnatredirect: add missing NULL pointer check...