Linux Kernel - Multiple Vulnerabilities
Summary
DLA-670-1: linux - security update. Affects linux versions < 3.2.82-1. Fixed in 3.2.82-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system. It provides essential functionality for the system, including device drivers, process management, and memory management. The kernel is responsible for managing the communication between hardware and software components. This vulnerability affects the Linux kernel in Debian 7 and Debian 8 distributions.
Vulnerability Detail
Multiple vulnerabilities have been discovered in the Linux kernel. These vulnerabilities include:
-
CVE-2015-8956: A missing input sanitizing in RFCOMM Bluetooth socket handling can lead to denial of service or information leaks.
-
CVE-2016-5195: A race condition in the memory management code can be exploited for local privilege escalation. This vulnerability does not affect kernels built with PREEMPT_RT enabled.
-
CVE-2016-7042: Incorrect buffer allocation in the proc_keys_show() function can result in local denial of service.
-
CVE-2016-7425: A buffer overflow in the arcmsr SCSI driver may lead to local denial of service or arbitrary code execution.
How To Fix
Minimum fixed version
3.2.82-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
Multiple vulnerabilities have been discovered in the Linux kernel, which can lead to privilege escalation, denial of service, information leaks, and potential arbitrary code execution. It is crucial to upgrade the Linux packages to the fixed versions to mitigate these vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
These vulnerabilities can lead to privilege escalation, denial of service, information leaks, and potential arbitrary code execution.
No, these vulnerabilities specifically affect the Linux kernel in Debian 7 Wheezy and Debian 8 Jessie distributions.
No specific workaround has been provided. It is recommended to upgrade the Linux packages to the fixed versions.
No, these vulnerabilities require local access to the system to be exploited.
You can find more information about Debian LTS security advisories, including how to apply updates and frequently asked questions, at https://wiki.debian.org/LTS.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
