[manjaro-security] [arch-security] [ASA-201701-32] linux: privilege escalation
Chris.Rebischke at archlinux.org
Fri Jan 27 19:00:50 CET 2017
Arch Linux Security Advisory ASA-201701-32
Date : 2017-01-27
CVE-ID : CVE-2017-2583
Package : linux
Type : privilege escalation
Remote : No
Link : https://security.archlinux.org/AVG-149
The package linux before version 4.9.5-1 is vulnerable to privilege
Upgrade to 4.9.5-1.
# pacman -Syu "linux>=4.9.5-1"
The problem has been fixed upstream in version 4.9.5.
The Linux kernel > 3.6-rc1, when built with Kernel-based Virtual
Machine (CONFIG_KVM) support, is vulnerable to an incorrect segment
selector (SS) value error. It could occur loading values into SS
register in long mode.
A user/process inside a guest host could use this flaw to crash the
guest, resulting in denial of service, or potentially escalate their
privileges inside the guest system on an AMD processor.
A local attacker in a guest host is able to crash the system or
escalate privileges inside the guest on an AMD processor.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 833 bytes
Desc: not available
More information about the manjaro-security