Friday, September 11, 2020
Kernel Live Patch Security Notice LSN-0071-1
advisory
arbitrary
denial of service
kernel
local
In: advisory, arbitrary, denial of service, kernel, local
A security issue was fixed in the 4.15 kernel. This issue affects the 5.4 kernel as well, but a livepatch is not yet available. While work is continuing to develop livepatches for all affected kernels, due to the severity of the issue, they are releasing patches as they become ready. Or Cohen discovered that the AF_PACKET implementation in the Linux kernel did not properly perform bounds checking in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. Kernel Live Patch Security Notice LSN-0071-1
