Linux Kernel - Multiple Vulnerabilities
Summary
DLA-833-1: linux - security update. Affects linux versions < 3.2.84-2. Fixed in 3.2.84-2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and providing essential functionality. It is widely used in various distributions, including Debian. This advisory addresses multiple vulnerabilities in the Linux kernel that could lead to privilege escalation, denial of service, or information disclosure.
Vulnerability Detail
The vulnerabilities identified in the Linux kernel include:
-
CVE-2014-9888: On ARM systems, memory allocated for DMA buffers was mapped with executable permission, making it easier to exploit other kernel vulnerabilities.
-
CVE-2014-9895: The MEDIA_IOC_ENUM_LINKS ioctl on media devices resulted in an information leak.
-
CVE-2016-6786 / CVE-2016-6787: The performance events subsystem did not properly manage locks during certain migrations, allowing a local attacker to escalate privileges. Disabling unprivileged use of performance events can mitigate this vulnerability.
-
CVE-2016-8405: The frame buffer video subsystem did not properly check bounds while copying color maps to userspace, leading to a heap buffer out-of-bounds read and information disclosure.
-
CVE-2017-5549: The KLSI KL5KUSB105 serial USB device driver could log the contents of uninitialized kernel memory, resulting in an information leak.
-
CVE-2017-6001: A race condition between concurrent calls to the performance events subsystem allowed a local attacker to escalate privileges. Disabling unprivileged use of performance events can mitigate this vulnerability.
-
CVE-2017-6074: A use-after-free vulnerability in the DCCP networking code could result in denial of service or local privilege escalation. Disabling the dccp module can mitigate this vulnerability.
How To Fix
Minimum fixed version
3.2.84-2
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
For systems that do not require the affected functionality, the following workarounds can be applied:
- Disabling unprivileged use of performance events: sysctl kernel.perf_event_paranoid=3
- Disabling the dccp module: echo >> /etc/modprobe.d/disable-dccp.conf install dccp false
Conclusion
Multiple vulnerabilities have been identified in the Linux kernel, which could have serious security implications. It is crucial to upgrade the affected Linux kernel packages to the recommended versions or apply the provided workarounds. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and providing essential functionality.
These vulnerabilities could lead to privilege escalation, denial of service, or information disclosure, depending on the specific vulnerability.
To fix these vulnerabilities, it is recommended to upgrade the Linux kernel packages to the specified versions for your Debian distribution.
Yes, there are workarounds available for some of the vulnerabilities. These include disabling unprivileged use of performance events and disabling the dccp module.
You can find more information about Debian LTS security advisories, including how to apply updates and frequently asked questions, on the Debian LTS wiki.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
