CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:N/I:N/A:C
EPSS
Percentile
62.0%
This kernel update is based on upstream 4.1.13 longterm kernel and fixes the following security issues: The virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel before 4.2 attempts to support a FRAGLIST feature without proper memory allocation, which allows guest OS users to cause a denial of service (buffer overflow and memory corruption) via a crafted sequence of fragmented packets. (CVE-2015-5156) A guest to host DoS issue was found affecting various hypervisors. In that, a guest can DoS the host by triggering an infinite stream of “alignment check” (#AC) exceptions. This causes the microcode to enter an infinite loop where the core never receives another interrupt. The host kernel panics due to this effect (CVE-2015-5307). A guest to host DoS issue was found affecting various hypervisors. In that, a guest can DoS the host by triggering an infinite stream of “debug check” (#DB) exceptions. This causes the microcode to enter an infinite loop where the core never receives another interrupt. The host kernel panics due to this effect (CVE-2015-8104). For other fixes in this update, see the referenced changelog.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Mageia | 5 | noarch | kernel | < 4.1.13-2 | kernel-4.1.13-2.mga5 |
Mageia | 5 | noarch | kernel-userspace-headers | < 4.1.13-2 | kernel-userspace-headers-4.1.13-2.mga5 |
Mageia | 5 | noarch | kmod-xtables-addons | < 2.7-6 | kmod-xtables-addons-2.7-6.mga5 |
Mageia | 5 | noarch | kmod-broadcom-wl | < 6.30.223.271-3 | kmod-broadcom-wl-6.30.223.271-3.mga5.nonfree |
Mageia | 5 | noarch | kmod-fglrx | < 15.200.1046-7 | kmod-fglrx-15.200.1046-7.mga5.nonfree |
Mageia | 5 | noarch | kmod-nvidia304 | < 304.128-3 | kmod-nvidia304-304.128-3.mga5.nonfree |
Mageia | 5 | noarch | kmod-nvidia340 | < 340.93-3 | kmod-nvidia340-340.93-3.mga5.nonfree |
Mageia | 5 | noarch | kmod-nvidia-current | < 346.96-3 | kmod-nvidia-current-346.96-3.mga5.nonfree |