Ready to be published? LXer is read by around 350,000 individuals each month, and is an excellent place for you to publish your ideas, thoughts, reviews, complaints, etc. Do you have something to say to the Linux community?
A new important Linux kernel security update was released for Red Hat Enterprise Linux 7 and CentOS Linux 7 users to address several vulnerabilities and also fix some bugs.
The new kernel security update patches a 7-years-old privilege escalation flaw (CVE-2021-33909) discovered by Qualys Research Labs in Linux kernel’s filesystem layer, which could allow an unprivileged user to create, mount, and then delete a large directory structure of over 1GB in size.
It also patches two use-after-free vulnerabilities (CVE-2021-33033 and CVE-2021-33034) discovered in Linux kernel’s CIPSO network packet labeling protocol functionality and Bluetooth HCI driver respectively, which could allow a local attacker to crash the system, execute arbitrary code, or escalate their privileges on the system.
A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.
Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help
