centos CVE-2014-4943

CentOS Linux Kernel Update 2.6.32-431.20.5 Released

Posted by Curtis K in Administration Jul, 26 2014 No Comments

CentOS 6 Linux kernel 2.6.32-431.20.5 has just been released. Update type(s): security Resolved CVEs: CVE-2014-4699 CVE-2014-4943 * It was found that the Linux kernel's ptrace subsystem allowed a traced process' instruction pointer to be set to a non-canonical memory address without forcing the non-sysret code path when returning to user space. A local, unprivileged user could use this flaw to ... Read More...