Shulou(Shulou.com)06/01 Report--

This article mainly shows you the "sample analysis of Linux Kernel patches in CentOS7", which is easy to understand and clear. I hope it can help you solve your doubts. Let the editor lead you to study and study the "sample analysis of Linux Kernel patches in CentOS7".

Based on the free release source of Red Hat Enterprise Linux 7, the CentOS 7 branch inherits the feature of always getting the latest kernel security updates. Today, the system team released a very important patch that fixes four recent vulnerabilities in a timely manner, and recommends that users install the patch and upgrade to kernel-3.10.0-514.10.2.el7 as soon as possible.

According to the RHSA-2017:0386-1 security bulletin, one of the vulnerabilities fixed by this kernel patch is the Linux Kernel KVM (Kernel-based Virtual Machine) deployment (CVE-2016-8630), which causes 32-bit (x86) applications to crash when undefined instructions are simulated, allowing attackers to attack the host kernel.

The second security vulnerability (CVE-2016-8655) I is the network subsystem of Linux Kernel, which allows local attackers to use CAP_NET_RAW to open raw packet socket to gain root privileges. The third security vulnerability (CVE-2016-9083) is Linux Kernel's VFIO deployment, which allows attackers to cause memory overflow errors. The last one (CVE-2016-9084) is able to combine with the third to attack the victim system.

The above is all the content of the article "sample Analysis of Linux Kernel patches in CentOS7". Thank you for reading! I believe we all have a certain understanding, hope to share the content to help you, if you want to learn more knowledge, welcome to follow the industry information channel!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.