PT-2016-7426

CVE-2016-7911

·

تاريخ النشر

2016-08-15

·

تاريخ التحديث

2023-01-19

الوصف من

CVSS 2.0
9.3
عالية
المقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.6.6
Description A race condition exists in the get task ioprio function, allowing local users to potentially gain privileges or cause a denial of service through a crafted ioprio get system call. This issue can lead to a use-after-free scenario.
Recommendations For Linux kernel versions prior to 4.6.6, update to version 4.6.6 or later to resolve the issue. As a temporary workaround, consider restricting access to the ioprio get system call to minimize the risk of exploitation.
قابلية الاستغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
المعرّفات ذات الصلة
ALT-PU-2016-1842
ALT-PU-2016-1843
DLA-772-1
OPENSUSE-SU-2016_3061-1
SUSE-SU-2017:0333-1
SUSE-SU-2017:0407-1
SUSE-SU-2017:0437-1
SUSE-SU-2017:0464-1
SUSE-SU-2017:0471-1
SUSE-SU-2017:0494-1
SUSE-SU-2017:1102-1
USN-3206-1
USN-3207-1
USN-3207-2
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾