SB2016120105 - Denial of service in Linux Kernel
Published: December 1, 2016
Security Bulletin ID
SB2016120105
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Double free (CVE-ID: CVE-2017-2596)
The vulnerability allows a local attacker to gain elevated privileges or cause DoS condition.The weakness exists due to improper emulation of the VMXON instruction by the nested_vmx_check_vmptr function. A local attacker can leverage the mishandling of page references, trigger double free error and gain elevated privileges or cause the application to crash.
Successful exploitation of the vulnerability results in denial of service.
Remediation
Install update from vendor's website.