REDHAT-BUG-761646: Medium severity red hat linux vulnerability
Dereferencing a user pointer directly from kernel-space without going through the copyfromuser family of functions is a bad idea. Two of such usages can be found in the sendmsg code path called from sendmmsg, added by upstream commit c71d8ebe7a4496fb7231151cb70a6baa0cb56f9a. Usages are performed through memcmp() and memcpy() directly.
Upstream fix: http://git.kernel.org/linus/bc909d9ddbf7778371e36a651d6e4194b1cc7d4c
Acknowledgements:
Red Hat would like to thank Tetsuo Handa for reporting this issue. Upstream acknowledges Mathieu Desnoyers as the original reporter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-761646?
REDHAT-BUG-761646 is classified as a high severity vulnerability due to potential memory corruption risks.
How do I fix REDHAT-BUG-761646?
To fix REDHAT-BUG-761646, upgrade to an appropriate patched version of the Red Hat Linux Kernel that addresses this vulnerability.
What happens if I ignore REDHAT-BUG-761646?
Ignoring REDHAT-BUG-761646 may lead to system instability and increased risks of exploitation through memory corruption.
Which versions of Red Hat Linux Kernel are affected by REDHAT-BUG-761646?
Only the version specified in the vulnerability, c71d8ebe7a4496fb7231151cb70a6baa0cb56f9a, is affected by REDHAT-BUG-761646.
Is REDHAT-BUG-761646 related to user input handling?
Yes, REDHAT-BUG-761646 involves dereferencing user pointers in kernel space directly, highlighting risks with user input handling.