Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale.
Voir CVE-2016-10153 →
DEBIAN-CVE-2016-10153
The crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
The crypto scatterlist API in the Linux kernel 4.9.x before 4.9.6 interacts incorrectly with the CONFIG_VMAP_STACK option, which allows local users to cause a denial of service (system crash or memory corruption) or possibly have unspecified other impact by leveraging reliance on earlier net/ceph/crypto.c code.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Paquets affectés
Debian:12
linux
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.6-1"}]}]
Debian:13
linux
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.6-1"}]}]
Debian:14
linux
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.6-1"}]}]
Références
- advisory security-tracker.debian.org