SB2016112911 - Fedora 23 update for kernel
Published: November 29, 2016 Updated: April 24, 2025
Security Bulletin ID
SB2016112911
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Input validation error (CVE-ID: CVE-2016-8650)
The vulnerability allows a local authenticated user to perform a denial of service (DoS) attack.
The mpi_powm function in lib/mpi/mpi-pow.c in the Linux kernel through 4.8.11 does not ensure that memory is allocated for limb data, which allows local users to cause a denial of service (stack memory corruption and panic) via an add_key system call for an RSA key with a zero exponent.
Remediation
Install update from vendor's website.