Advisories » MGASA-2015-0439

Updated kernel-linus packages fixes security vulnerability

Publication date: 10 Nov 2015
Modification date: 17 Feb 2022
Type: security
Affected Mageia releases : 5
CVE: CVE-2015-5257

Description

This update of kernel-linus provides the upstream 4.1.12 longterm kernel
and fixes at least the following security issue:

Moein Ghasemzadeh discovered that the USB WhiteHEAT serial driver contained
hardcoded attributes about the USB devices. An attacker could construct a
fake WhiteHEAT USB device that, when inserted, causes a denial of service
(system crash) (CVE-2015-5257).

It also fixes various upstream bugs, for more info see the referenced
changelogs:
                

References

• https://bugs.mageia.org/show_bug.cgi?id=17066
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.9
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.10
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.11
• https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.1.12
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5257

SRPMS

5/core

• kernel-linus-4.1.12-1.mga5