Linux Kernel - Security Update (DSA-3426-1)
Summary
DSA-3426-1: linux - security update. Affects linux versions < 3.2.73-2+deb7u1. Fixed in 3.2.73-2+deb7u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of the Linux operating system. It provides essential functionality and interfaces for various hardware devices, file systems, and system services. The Linux kernel is widely used in both desktop and server environments. This security update, DSA-3426-1, addresses multiple vulnerabilities that could lead to privilege escalation, denial of service, information leaks, or data loss.
Vulnerability Detail
The vulnerabilities addressed in this update include:
-
CVE-2013-7446: A use-after-free vulnerability in the local (AF_UNIX) sockets could be exploited to cause a denial of service or privilege escalation.
-
CVE-2015-7799: A user with access to /dev/ppp could trigger a denial of service by passing invalid parameters to the PPPIOCSMAXCID ioctl.
-
CVE-2015-7833: A flaw in the processing of certain USB device descriptors in the usbvision driver could be abused by an attacker with physical access to crash the system.
-
CVE-2015-8104: A guest-to-host denial-of-service flaw affecting the KVM hypervisor running on AMD processors could be exploited by a malicious guest to trigger an infinite stream of debug exceptions, leading to a panic of the host kernel.
-
CVE-2015-8374: Btrfs did not correctly implement truncation of compressed inline extents, which could result in information leaks and data loss.
-
CVE-2015-8543: A local user with the CAP_NET_RAW capability in their user namespace could cause a denial-of-service by specifying an invalid protocol number for a raw socket.
These vulnerabilities pose various risks, including system crashes, privilege escalation, data loss, and denial of service attacks.
How To Fix
Minimum fixed version
3.2.73-2+deb7u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workarounds were mentioned for these vulnerabilities. It is recommended to apply the provided fixes by upgrading the Linux kernel packages.
Conclusion
This security update addresses multiple vulnerabilities in the Linux kernel that could lead to various security risks. It is highly recommended to upgrade the Linux kernel packages to the fixed versions to mitigate these vulnerabilities. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
The Linux kernel is the core component of the Linux operating system. It provides essential functionality and interfaces for various hardware devices, file systems, and system services.
These vulnerabilities can lead to system crashes, privilege escalation, data loss, and denial of service attacks.
To fix these vulnerabilities, it is recommended to upgrade the Linux kernel packages to the fixed versions.
No specific workarounds were mentioned for these vulnerabilities. It is recommended to apply the provided fixes by upgrading the Linux kernel packages.
The package upgrades can be obtained from the official Debian repositories or through package managers like apt-get or aptitude.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
