Date: Fri, 25 Nov 2016 10:25:20 +1100 From: Wade Mealing <wmealing@...hat.com> To: oss-security@...ts.openwall.com Subject: Linux kernel: CVE-2016-8650 : Local denial of service with in key subsystem Gday, A flaw was found in the Linux kernel key management subsystem in which a local attacker could crash the kernel (denial of service) or corrupt the stack and additional memory by supplying a specially crafted RSA key. This flaw panics the machine during the verification of the RSA key and seems to do a 1 byte corruption of the stack. This vulnerably can be triggered by any unprivileged user with a local shell account. Upstream fix: https://lkml.org/lkml/2016/11/23/477 Red Hat bug: https://bugzilla.redhat.com/show_bug.cgi?id=1395187
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.