Linux kernel ASLR protection Bypass Vulnerability (CVE-2016-3672)

Linux kernel ASLR protection Bypass Vulnerability (CVE-2016-3672)
Linux kernel ASLR protection Bypass Vulnerability (CVE-2016-3672)

Release date:
Updated on:

Affected Systems:

Linux kernel < 4.5.2

Description:

CVE (CAN) ID: CVE-2016-3672

Linux Kernel is the Kernel of the Linux operating system.

In versions earlier than Linux kernel 4.5.2, The arch_pick_mmap_layout function in arch/x86/mm/mmap. c does not properly randomize the legacy base addresses. After the local user disables the stack resource consumption limit, the restriction of the ADDR_NO_RANDOMIZE mark can be broken, bypassing the ASLR protection mechanism of the setuid or setgid program.

<* Source: Andrej Nemec
*>

Suggestion:

Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://bugzilla.redhat.com/show_bug.cgi? Id = 1324749
Https://github.com/torvalds/linux/commit/8b8addf891de8a00e4d39fc32f93f7c5eb8feceb
Http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit? Id = 8b8addf891de8a00e4d39fc32f93f7c5eb8feceb

How to install Linux Kernel 4.4 on Ubuntu

Linux Kernel 4.2.2 compilation and installation tutorial

Ubuntu 15.10 will use the Linux Kernel 4.2 Kernel

How to install Kernel 4.0.2 on CentOS 7

How to install Linux Kernel 4.0 on CentOS 7

How to install Linux kernel 4.0 on Ubuntu/CentOS?

How to install Linux kernel 13.10 On Ubuntu 3.12

How to install the 3.16.7 CKT2 kernel in Ubuntu 14.10, Ubuntu 14.04, and its derivative versions

Linux Kernel: click here
Linux Kernel: click here

This article permanently updates the link address: