The proc_keys_show function in security/keys/proc.c in the Linux kernel through 4.8.2, when the GNU Compiler Collection (gcc) stack protector is enabled, uses an incorrect buffer size for certain timeout data, which allows local users to cause a denial of service (stack memory corruption and panic) by reading the /proc/keys file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade kernel-rtUpgrade kernel | Aug 28, 2019 | Oct 16, 2016 |
| Debian | — | Upgrade linux | Oct 20, 2016 | Oct 16, 2016 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jan 13, 2017 | Oct 13, 2016 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Mar 23, 2017 | Oct 16, 2016 |
| Suse | — | Upgrade kernel-ec2Upgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-ec2-develUpgrade kernel-ec2-extraUpgrade kernel-obs-buildUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade cluster-network-kmp-default | Nov 25, 2016 | Oct 16, 2016 |
| Ubuntu | — | Upgrade linux-image-4.4.0-47-powerpc64-embUpgrade linux-image-3.13.0-101-powerpc-e500Upgrade linux-image-3.2.0-115-genericUpgrade linux-image-3.13.0-101-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-3.13.0-101-lowlatencyUpgrade linux-image-4.8.0-27-genericUpgrade linux-image-4.8.0-27-powerpc-smpUpgrade linux-image-4.4.0-47-powerpc-smpUpgrade linux-image-4.4.0-1035-snapdragonUpgrade linux-image-genericUpgrade linux-image-powerpc-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.8.0-27-lowlatencyUpgrade linux-image-3.2.0-115-omapUpgrade linux-image-4.8.0-27-generic-lpaeUpgrade linux-image-generic-lts-trustyUpgrade linux-image-omapUpgrade linux-image-3.13.0-101-genericUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1038-raspi2Upgrade linux-image-3.2.0-115-highbankUpgrade linux-image-3.2.0-1493-omap4Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-47-genericUpgrade linux-image-generic-paeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.8.0-27-powerpc-e500mcUpgrade linux-image-omap4Upgrade linux-image-4.8.0-1018-raspi2Upgrade linux-image-3.13.0-101-powerpc64-embUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-3.2.0-115-powerpc-smpUpgrade linux-image-4.4.0-47-powerpc64-smpUpgrade linux-image-powerpc-e500Upgrade linux-image-3.2.0-115-virtualUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpcUpgrade linux-image-4.4.0-47-lowlatencyUpgrade linux-image-highbankUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-3.13.0-101-powerpc-smpUpgrade linux-image-raspi2Upgrade linux-image-virtualUpgrade linux-image-3.2.0-115-powerpc64-smpUpgrade linux-image-4.4.0-47-powerpc-e500mcUpgrade linux-image-3.13.0-101-powerpc64-smpUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc64-embUpgrade linux-image-3.2.0-115-generic-paeUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-101-powerpc-e500mcUpgrade linux-image-4.8.0-27-powerpc64-embUpgrade linux-image-4.4.0-47-generic-lpae | Nov 11, 2016 | Oct 16, 2016 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Oct 16, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub