USN-3129-2: Linux kernel (Raspberry Pi 2) vulnerabilities
Ondrej Kozina discovered that the keyring interface in the Linux kernel contained a buffer overflow when displaying timeout events via the /proc/keys interface. A local attacker could use this to cause a denial of service (system crash). (CVE-2016-7042)
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this Linux kernel vulnerability?
The vulnerability ID for this Linux kernel vulnerability is CVE-2016-7042.
What is the severity level of the Linux kernel vulnerability?
The severity level of the Linux kernel vulnerability is not mentioned in the provided information.
What is the affected software for this Linux kernel vulnerability?
The affected software for this Linux kernel vulnerability is Ubuntu 16.10 with Linux kernel version 4.8.0-1018-raspi2 or 4.8.0.1018.21.
How can a local attacker exploit this vulnerability?
A local attacker can exploit this vulnerability by causing a denial of service (system crash) through the buffer overflow in the keyring interface when displaying timeout events via the /proc/keys interface.
How can I fix this Linux kernel vulnerability?
To fix this Linux kernel vulnerability, update the Linux kernel to version 4.8.0-1018.21 or higher.