kernel: privilege escalation
| Package(s): | kernel | CVE #(s): | CVE-2015-8539 | ||||||||||||||||||||||||||||||||||||
| Created: | January 19, 2016 | Updated: | January 20, 2016 | ||||||||||||||||||||||||||||||||||||
| Description: | From the SUSE bugzilla entry:
If a user key gets negatively instantiated, an error code is cached in the payload area. A negatively instantiated key may be then be positively instantiated by updating it with valid data. However, the ->update key type method must be aware that the error code may be there. The paging address is predictable and mappable as userspace memory and can be used by abused by an attacker to escalate privileges. | ||||||||||||||||||||||||||||||||||||||
| Alerts: |
| ||||||||||||||||||||||||||||||||||||||