Linux Kernel "assoc_array_gc ()" null pointer indirect reference vulnerability
Release date:
Updated on:
Affected Systems:
Linux kernel 3.16.2-3.14.18
Description:
CVE (CAN) ID: CVE-2014-3631
Linux Kernel is the Kernel of the Linux operating system.
In Linux Kernel 3.16.2-3.14.18, the NULL pointer indirect reference vulnerability exists in the "assoc_array_gc ()" function (lib/assoc_array.c), which can cause a crash after successful exploitation.
<* Source: Lorenz Sartoratti
*>
Suggestion:
Vendor patch:
Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
Http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit? Id = 95389b08d93d5c06ec63ab49bd732b0069b7c35e
Https://bugzilla.redhat.com/show_bug.cgi? Id = 1116347
The Ubuntu 13.10 (Saucy Salamander) Kernel has been upgraded to Linux Kernel 3.10 RC5
Linux Kernel 3.4.62 LTS is now available for download
How to install Linux kernel 13.10 On Ubuntu 3.12
Linux Kernel: click here
Linux Kernel: click here
This article permanently updates the link address: