CVE-2016-0728

The CVE-2016-0728 issue affects the Linux kernel up to version 4.4.1, specifically in the keyring handling path join_session_keyring() within security/keys/process_keys.c. A flaw in object reference management in an error path can allow a local, unprivileged user to escalate privileges or cause a...

Linux Kernel "key_replace_session_keyring()"空指针引用拒绝服务漏洞

Linux是一款开放源代码的操作系统。 security/keys/processkeys.c提供的"keyreplacesessionkeyring"函数存在错误，使用syscallNRkeyctl, KEYCTLSESSIONTOPARENT可导致空指针应用而使内核崩溃。 Linux Kernel 2.6.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...