ELSA-2015-0290 -- Oracle kernel_python-perf_perfID: oval:org.secpod.oval:def:1500947 | Date: (C)2015-03-24 (M)2024-04-17 |
Class: PATCH | Family: unix |
The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO & !OPOST" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.
Product: |
kernel |
python-perf |
perf |