漏洞信息
It was discovered that the keyring implementation in the Linux kernel did not ensure a data structure was initialized before referencing it after an error condition occurred.
An information leak in the netlink implementation of the Linux kernel.
漏洞危害
A local attacker could use this to cause a denial of service (system crash). (CVE-2016-4470)
A local attacker could use this to obtain sensitive information from kernel memory. (CVE-2016-5243)
解决方案
Refer to Ubuntu advisory USN-3051-1 for affected packages and patching details, or update with your package manager.
Patch:
Following are links for downloading patches to fix the vulnerabilities:
USN-3051-1: 12.04 (Precise) on src (linux-image-3.13.0-93-generic)
USN-3051-1: 12.04 (Precise) on src (linux-image-3.13.0-93-generic-lpae)
0day
文章评论