Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2016-10044 →
DEBIAN-CVE-2016-10044
The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users t...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The aio_mount function in fs/aio.c in the Linux kernel before 4.7.7 does not properly restrict execute access, which makes it easier for local users to bypass intended SELinux W^X policy restrictions, and consequently gain privileges, via an io_setup system call.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
linux
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.8-1"}]}]
Debian:13
linux
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.8-1"}]}]
Debian:14
linux
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.8-1"}]}]
Références
- advisory security-tracker.debian.org