Linux Kernel Local Security Restriction Bypass Vulnerability (CVE-2015-3212)

Linux Kernel Local Security Restriction Bypass Vulnerability (CVE-2015-3212)
Linux Kernel Local Security Restriction Bypass Vulnerability (CVE-2015-3212)

Release date:
Updated on:

Affected Systems:

Linux kernel <3.1.8

Description:

Bugtraq id: 76082
CVE (CAN) ID: CVE-2015-3212

Linux Kernel is the Kernel of the Linux operating system.

When Linux kernel executes ASCONF, there is a race condition vulnerability in the Address Configuration list processed in SCTP implementation. A local attacker sets some ASCONF options of the socket to trigger competition conditions, this vulnerability can crash the system.

<* Source: Ji Jianwen
*>

Suggestion:

Vendor patch:

Linux
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://git.kernel.org/linus/2d45a02d0166caf2627fe91897c6ffc3b19514c4

How to install Kernel 4.0.2 on CentOS 7

How to install Linux Kernel 4.0 on CentOS 7

How to install Linux kernel 4.0 on Ubuntu/CentOS?

How to install Linux kernel 13.10 On Ubuntu 3.12

How to install the 3.16.7 CKT2 kernel in Ubuntu 14.10, Ubuntu 14.04, and its derivative versions

Linux Kernel: click here
Linux Kernel: click here

This article permanently updates the link address: