4.4
Moyenne
CVE-2016-9604 It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as…
Description
It was discovered in the Linux kernel before 4.11-rc8 that root can gain direct access to an internal keyring, such as '.dns_resolver' in RHEL-7 or '.builtin_trusted_keys' upstream, by joining it as its session keyring. This allows root to bypass module signature verification by adding a new public key of its own devising to the keyring.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| security | Versions non publiées |
Références
- git.kernel.org git.kernel.org
- RHSA-2017:2669 access.redhat.com
- bugzilla.redhat.com bugzilla.redhat.com
- bugzilla.novell.com bugzilla.novell.com
- people.canonical.com people.canonical.com
- 102135 www.securityfocus.com
- RHSA-2017:2077 access.redhat.com
- RHSA-2017:1842 access.redhat.com
Chronologie
- Publiée
- Dernière modification