kernel: multiple vulnerabilities
Package(s): | kernel | CVE #(s): | CVE-2017-5577 CVE-2017-5576 CVE-2017-5551 CVE-2017-5548 CVE-2016-10153 CVE-2017-5547 | ||||||||||||||||||||||||||||||||||||||||
Created: | January 31, 2017 | Updated: | February 1, 2017 | ||||||||||||||||||||||||||||||||||||||||
Description: | From the Fedora advisory:
Bug #1416437 - CVE-2017-5577 kernel: vc4: Heap-buffer overflow due to failing checks. Bug #1416436 - CVE-2017-5576 kernel: vc4: Integer overflow in temporary allocation layout. Bug #1416126 - CVE-2017-5551 kernel: S_ISGD is not cleared when setting posix ACLs in tmpfs (CVE-2016-7097 incomplete fix). Bug #1416110 - CVE-2017-5548 kernel: Using stack for buffers in ieee802154. Bug #1416101 - CVE-2016-10153 kernel: introduce ceph_crypt() for in-place en/decryption. Bug #1416096 - CVE-2017-5547 kernel: DMA buffers on stack. | ||||||||||||||||||||||||||||||||||||||||||
Alerts: |
|