Ask / Submit

take reference on channels netns in kernel-ppp CVE-2016-4805 critical [released]

Tracked by Jolla (In release)

asked 2017-05-11 15:03:43 +0300

this post is marked as community wiki

This post is a wiki. Anyone with karma >75 is welcome to improve it.

updated 2017-05-11 15:03:43 +0300

lpr gravatar image

Use-after-free vulnerability in drivers/net/ppp/ppp_generic.c in the Linux kernel before 4.5.2 allows local users to cause a denial of service (memory corruption and system crash, or spinlock) or possibly have unspecified other impact by removing a network namespace, related to the ppp_register_net_channel and ppp_unregister_channel functions. CVSSv3:7.8 high (attack range: local)

Upstream Patch is available.

file affected: kernel-adaptation-sbj- lines 2177-2183; 2274-2279

edit retag flag offensive reopen delete

The question has been closed for the following reason "released in a software update" by lpr
close date 2017-07-24 21:06:32.057861


released in Jämsänjoki /

lpr ( 2017-07-24 21:06:17 +0300 )edit

1 Answer

Sort by » oldest newest most voted

answered 2017-06-01 01:03:37 +0300

IZh gravatar image

Already in devel.

edit flag offensive delete publish link more

Question tools

1 follower


Asked: 2017-05-11 15:03:43 +0300

Seen: 99 times

Last updated: Jun 01 '17