CVE-2017-1000405 Ubuntu Security Notification for Linux, Linux-raspi2 Vulnerabilities (USN-3508-1)

2017年12月14日 1334点热度 0人点赞 0条评论

漏洞类别：Ubuntu

漏洞等级：

漏洞信息

A use-after-free vulnerability existed in the Netlink subsystem (XFRM) in the Linux kernel.

It was discovered that the Linux kernel did not properly handle copy-on- write of transparent huge pages.

A race condition existed in the driver subsystem in the Linux kernel.

漏洞危害

A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-16939)

A local attacker could use this to cause a denial of service (application crashes) or possibly gain administrative privileges. (CVE-2017-1000405)

A local attacker could use this to possibly gain administrative privileges. (CVE-2017-12146)

解决方案

Refer to Ubuntu advisory USN-3508-1 for affected packages and patching details, or update with your package manager.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

0daybank