The proc_keys_show function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection (gcc) stack protector is enabled, uses an incorrect buffer size for certain timeout data, which allows local users to cause a denial of service (stack memory corruption and panic) by reading the /proc/keys file.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernelUpgrade kernel-rt | Aug 28, 2019 | Oct 16, 2016 |
| Debian | — | Upgrade linux | Oct 20, 2016 | Oct 16, 2016 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel | Jan 13, 2017 | Oct 13, 2016 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Mar 23, 2017 | Oct 16, 2016 |
| Suse | — | Upgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade cluster-network-kmp-defaultUpgrade kernel-docsUpgrade kernel-ec2-develUpgrade kernel-ec2Upgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-default | Nov 25, 2016 | Oct 16, 2016 |
| Ubuntu | — | Upgrade linux-image-3.13.0-101-genericUpgrade linux-image-generic-paeUpgrade linux-image-4.8.0-27-genericUpgrade linux-image-3.2.0-1493-omap4Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1035-snapdragonUpgrade linux-image-4.4.0-47-powerpc64-embUpgrade linux-image-3.2.0-115-highbankUpgrade linux-image-4.8.0-27-powerpc-smpUpgrade linux-image-generic-lts-trustyUpgrade linux-image-4.4.0-47-genericUpgrade linux-image-4.4.0-1038-raspi2Upgrade linux-image-3.2.0-115-genericUpgrade linux-image-3.2.0-115-omapUpgrade linux-image-4.8.0-27-lowlatencyUpgrade linux-image-omapUpgrade linux-image-3.13.0-101-powerpc-e500Upgrade linux-image-powerpc-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-genericUpgrade linux-image-4.8.0-27-generic-lpaeUpgrade linux-image-3.13.0-101-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-101-generic-lpaeUpgrade linux-image-4.4.0-47-powerpc-smpUpgrade linux-image-4.4.0-47-powerpc64-smpUpgrade linux-image-powerpcUpgrade linux-image-3.13.0-101-powerpc64-embUpgrade linux-image-4.4.0-47-generic-lpaeUpgrade linux-image-powerpc-e500Upgrade linux-image-generic-lts-xenialUpgrade linux-image-4.8.0-27-powerpc-e500mcUpgrade linux-image-4.8.0-1018-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-101-powerpc-e500mcUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.2.0-115-powerpc-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-generic-lpaeUpgrade linux-image-raspi2Upgrade linux-image-3.13.0-101-powerpc-smpUpgrade linux-image-3.2.0-115-powerpc64-smpUpgrade linux-image-4.4.0-47-powerpc-e500mcUpgrade linux-image-virtualUpgrade linux-image-powerpc64-embUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-101-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-3.2.0-115-generic-paeUpgrade linux-image-highbankUpgrade linux-image-4.4.0-47-lowlatencyUpgrade linux-image-4.8.0-27-powerpc64-embUpgrade linux-image-3.2.0-115-virtualUpgrade linux-image-omap4 | Nov 11, 2016 | Oct 16, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 16, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub