The int3 handler in the Linux kernel before 3.3 relies on a per-CPU debug stack, which allows local users to cause a denial of service (stack corruption and panic) via a crafted application that triggers certain lock contention.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Suse | — | Upgrade kernel-rt_traceUpgrade cluster-network-kmp-rt_traceUpgrade cluster-network-kmp-rtUpgrade kernel-syms-rtUpgrade kernel-rt_trace-develUpgrade SUSE-Linux-Enterprise-RT-releaseUpgrade brocade-bna-kmp-rtUpgrade kernel-rt-develUpgrade drbd-kmp-rt_traceUpgrade ocfs2-kmp-rt_traceUpgrade kernel-rt_trace-baseUpgrade ocfs2-kmp-rtUpgrade ofed-kmp-rtUpgrade drbd-kmp-rtUpgrade kernel-rt-baseUpgrade kernel-rtUpgrade kernel-source-rtUpgrade iscsitarget-kmp-rt | Nov 18, 2015 | Nov 18, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub