SB2016041404 - Fedora 22 update for kernel
Published: April 14, 2016 Updated: April 24, 2025
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 3 secuirty vulnerabilities.
1) Resource exhaustion (CVE-ID: CVE-2016-3672)
The vulnerability allows a local attacker to bypass security restrictions on the target system.The weakness exists in the arch_pick_mmap_layout function in arch/x86/mm/mmap.c due to improper randomizing of the legacy base address. A local attacker can disable stack-consumption resource limits, defeat the intended restrictions on the ADDR_NO_RANDOMIZE flag and bypass the ASLR protection mechanism for a setuid or setgid program.
2) Race condition (CVE-ID: CVE-2015-8839)
The vulnerability allows a local non-authenticated attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a race condition within the init_once() function in fs/ext4/super.c, within the ext4_punch_hole(), ext4_setattr(), ext4_page_mkwrite() and block_page_mkwrite_return() functions in fs/ext4/inode.c, within the ext4_dax_fault() and ext4_dax_pmd_fault() functions in fs/ext4/file.c, within the ext4_zero_range(), ext4_collapse_range() and ext4_insert_range() functions in fs/ext4/extents.c. A local non-authenticated attacker can perform a denial of service (DoS) attack.
3) Double free (CVE-ID: CVE-2016-3951)
The vulnerability allows a local non-authenticated attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to a double free error within the drivers/net/usb/usbnet.c. A local non-authenticated attacker can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.