Alerts This Week
Warning Icon 1 681
Alerts This Week
Warning Icon 1 681

Mageia 7 MGASA-2021-0062 Moderate: PI Futexes Use-After-Free

mageia
Calendar Grey February 1, 2021
Dist Mageia Esm H88
Mageia Security Notice MGASA-2021-0063: kernel-linus patch addresses a major vulnerability in the Linux kernel.
This kernel-linus update is based on upstream 5.10.12 and fixes atleast the following security issue: An issue was discovered in the Linux kernel through 5.10.11

Summary

This kernel-linus update is based on upstream 5.10.12 and fixes atleast the following security issue:
An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel (CVE-2021-3347).
For other upstream fixes, see the referenced changelog.

References

- https://bugs.mageia.org/show_bug.cgi?id=28262

- https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.12

- https://www.cve.org/CVERecord?id=CVE-2021-3347

Resolution

SRPMS

- 7/core/kernel-linus-5.10.12-1.mga7

Publication date: 01 Feb 2021
URL: https://advisories.mageia.org/MGASA-2021-0062.html
Type: security
CVE: CVE-2021-3347

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here