Linux Kernel - Security Update
Summary
DSA-3364-1: linux - security update. Affects linux versions < 3.2.68-1+deb7u4. Fixed in 3.2.68-1+deb7u4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system. It provides essential functionality and interfaces for various hardware devices, file systems, and network protocols. The kernel is responsible for managing system resources, scheduling processes, and ensuring security. However, several vulnerabilities have been discovered in the Linux kernel that could lead to privilege escalation or denial of service.
Vulnerability Detail
The Linux kernel is affected by multiple vulnerabilities:
-
CVE-2015-8215: NetworkManager sets IPv6 MTUs based on values received in IPv6 RAs without proper validation, allowing a remote attacker to disable IPv6 connectivity.
-
CVE-2015-2925: When a subdirectory of a filesystem is bind-mounted into a container with its own user and mount namespaces, a process with CAP_SYS_ADMIN capability in the user namespace can access files outside of the subdirectory.
-
CVE-2015-5156: A heap buffer overflow can occur when a virtio_net device is connected to a bridge in the same VM, leading to a denial of service or privilege escalation.
-
CVE-2015-6252: The vhost driver leaks file descriptors passed to it with the VHOST_SET_LOG_FD ioctl command, allowing a privileged local user to cause a denial of service.
-
CVE-2015-6937: The Reliable Datagram Sockets (RDS) protocol implementation does not verify the existence of an underlying transport when creating a connection, allowing a remote attacker to cause a denial of service.
-
CVE-2015-7312: A race condition introduced by a patch in the aufs project can lead to a denial of service or privilege escalation when using the msync() system call or madvise_remove() function.
How To Fix
Minimum fixed version
3.2.68-1+deb7u4
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no specific workarounds mentioned for these vulnerabilities.
Conclusion
Multiple vulnerabilities have been discovered in the Linux kernel that could lead to privilege escalation or denial of service. It is crucial to upgrade the Linux kernel packages to the fixed versions to mitigate these vulnerabilities. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
These vulnerabilities can lead to privilege escalation or denial of service. An attacker may be able to disable IPv6 connectivity, access files outside of a subdirectory, cause a denial of service or privilege escalation through a heap buffer overflow, cause a denial of service by leaking file descriptors, or cause a denial of service through the RDS protocol implementation.
The vulnerabilities affect the oldstable distribution (wheezy) and the stable distribution (jessie) of Debian. Other Linux distributions may also be affected depending on their kernel versions and configurations.
Yes, patches have been released to fix these vulnerabilities. It is recommended to upgrade the Linux kernel packages to the specified versions.
Some of the vulnerabilities can be exploited remotely, while others require local access. For remote exploitation, an attacker would need to send crafted packets or exploit weaknesses in network protocols.
No specific workarounds have been mentioned for these vulnerabilities. It is recommended to upgrade the Linux kernel packages to the fixed versions.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
