** Changed in: linux-raspi2 (Ubuntu Xenial)
Status: New => Fix Committed
** Description changed:
- [Linux keyring subsystem race leads to null dereference]
+ The keyctl_read_key function in security/keys/keyctl.c in the Linux
+ kernel before 4.3.4 does not properly use a semaphore, which allows
+ local users to cause a denial of service (NULL pointer dereference and
+ system crash) or possibly have unspecified other impact via a crafted
+ application that leverages a race condition between keyctl_revoke and
+ keyctl_read calls.
Break-Fix: - b4a1b4f5047e4f54e194681125c74c0aa64d637d
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1530400
Title:
CVE-2015-7550
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1530400/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
