Linux-Vulnerability-CVE-2016-0728-and-Exploit

Linux-Vulnerability-CVE-2016-0728-and-Exploit Linux 커널 취약점 CVE-2016-0728 및 그 악용에 관한 문서 -참고 자료- https://perception-point.io/resources/research/analysis-and-exploitation-of-a-linux-kernel-vulnerability/ https://gist.github.com/PerceptionPointTeam/e9b47cf6a7240ac7b8c5file-processkeys-c...

CVE-2016-0728

The CVE-2016-0728 issue affects the Linux kernel up to version 4.4.1, specifically in the keyring handling path join_session_keyring() within security/keys/process_keys.c. A flaw in object reference management in an error path can allow a local, unprivileged user to escalate privileges or cause a...

Linux Kernel "key_replace_session_keyring()"空指针引用拒绝服务漏洞

Linux是一款开放源代码的操作系统。 security/keys/processkeys.c提供的"keyreplacesessionkeyring"函数存在错误，使用syscallNRkeyctl, KEYCTLSESSIONTOPARENT可导致空指针应用而使内核崩溃。 Linux Kernel 2.6.x 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息：...