MGASA-2016-0345
- Source
- https://advisories.mageia.org/MGASA-2016-0345.html
- Import Source
- https://advisories.mageia.org/MGASA-2016-0345.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/MGASA-2016-0345
- Related
- Published
- 2016-10-18T18:43:39Z
- Modified
- 2022-02-17T18:21:47Z
- Summary
- Updated kernel packages fixes security vulnerablilities
- Details
-
This update is based on the upstream 4.4.22 kernel and fixes at least theese security issues:
sound/core/timer.c in the Linux kernel through 4.6 does not initialize certain r1 data structures, which allows local users to obtain sensitive information from kernel stack memory via crafted use of the ALSA timer interface, related to the (1) sndtimeruserccallback and (2) sndtimerusertinterrupt functions (CVE-2016-4578).
The tipcnlcompatlinkdump function in net/tipc/netlink_compat.c in the Linux kernel through 4.6.3 does not properly copy a certain string, which allows local users to obtain sensitive information from kernel stack memory by reading a Netlink message (CVE-2016-5243).
The rdsincinfo_copy function in net/rds/recv.c in the Linux kernel through 4.6.3 does not initialize a certain structure member, which allows remote attackers to obtain sensitive information from kernel stack memory by reading an RDS message (CVE-2016-5244).
Memory leak in the airspyprobe function in drivers/media/usb/airspy/airspy.c in the airspy USB driver in the Linux kernel before 4.7 allows local users to cause a denial of service (memory consumption) via a crafted USB device that emulates many VFLTYPESDR or VFLTYPE_SUBDEV devices and performs many connect and disconnect operations (CVE-2016-5400).
Race condition in the ioctlsendfib function in drivers/scsi/aacraid/ commctrl.c in the Linux kernel through 4.7 allows local users to cause a denial of service (out-of-bounds access or system crash) by changing a certain size value, aka a "double fetch" vulnerability (CVE-2016-6480).
This update also changes the following: - enables STRICTDEVMEM as a security hardening - disables FWLOADERUSERHELPER_FALLBACK again (un-intentionally enabled in 4.4 series upgrade) that slows down boot or even makes wireless connection fail with drivers with multiple possible firmwares (mga#19390).
For other fixes in this update, see the referenced changelogs.
- References
-
- https://advisories.mageia.org/MGASA-2016-0345.html
- https://bugs.mageia.org/show_bug.cgi?id=19397
- https://bugs.mageia.org/show_bug.cgi?id=19390
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.17
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.18
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.19
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.20
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.21
- https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.22
- Credits
-
-
- Mageia - COORDINATOR
-
Affected packages
Mageia:5 / kernel
Package
- Name
- kernel
- Purl
- pkg:rpm/mageia/kernel?distro=mageia-5
Mageia:5 / kernel-userspace-headers
Package
- Name
- kernel-userspace-headers
- Purl
- pkg:rpm/mageia/kernel-userspace-headers?distro=mageia-5
Mageia:5 / kmod-vboxadditions
Package
- Name
- kmod-vboxadditions
- Purl
- pkg:rpm/mageia/kmod-vboxadditions?distro=mageia-5
Mageia:5 / kmod-virtualbox
Package
- Name
- kmod-virtualbox
- Purl
- pkg:rpm/mageia/kmod-virtualbox?distro=mageia-5
Mageia:5 / kmod-xtables-addons
Package
- Name
- kmod-xtables-addons
- Purl
- pkg:rpm/mageia/kmod-xtables-addons?distro=mageia-5