CVE:CVE-2016-0728
CNNVD:CNNVD-201601-381
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。
Linux kernel 4.4.1之前版本存在安全漏洞，该漏洞源于security/keys/process_keys.c中的join_session_keyring函数在某种错误情况下错误处理对象引用，从而导致本地用户获得权限或导致拒绝服务。
solution:Upgrade google android to a higher version than 4.0,4.0.1,4.0.2,4.0.3,4.0.4,4.1,4.1.2,4.2,4.2.1,4.2.2,4.3,4.3.1,4.4,4.4.1,4.4.2,4.4.3,5.0,5.0.1,5.0.2,5.1,5.1.0,5.1.1,6.0,6.0.1,and avoid the version 4.0,4.0.1,4.0.2,4.0.3,4.0.4,4.1,4.1.2,4.2,4.2.1,4.2.2,4.3,4.3.1,4.4,4.4.1,4.4.2,4.4.3,5.0,5.0.1,5.0.2,5.1,5.1.0,5.1.1,6.0,6.0.1; Upgrade hp server_migration_pack to a higher version than 7.5,and avoid the version (,7.5]; Upgrade linux linux_kernel to a higher version than 3.10.95,3.12.53,3.14.59,3.16.35,3.18.26,4.1.16,4.3.4,4.4.1,and avoid the version [3.8,3.10.95),[3.11,3.12.53),[3.13,3.14.59),[3.15,3.16.35),[3.17,3.18.26),[3.19,4.1.16),[4.2,4.3.4),[4.4,4.4.1); Upgrade debian debian_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade canonical ubuntu_linux to a higher version than 12.04,14.04,15.04,15.10,and avoid the version 12.04,14.04,15.04,15.10