Slackware Advisory SSA:2004-006-01 Kernel security update

  1. Network Vulnerabilities
  2. Slackware Local Security Checks
  3. Slackware Advisory SSA:2004-006-01 Kernel security update
Summary
The remote host is missing an update as announced via advisory SSA:2004-006-01.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=SSA:2004-006-01
Insight
New kernels are available for Slackware 9.0, 9.1 and -current. The 9.1 and -current kernels have been upgraded to 2.4.24, and a fix has been backported to the 2.4.21 kernels in Slackware 9.0 to fix a bounds-checking problem in the kernel's mremap() call which could be used by a local attacker to gain root privileges. Sites should upgrade to the 2.4.24 kernel and kernel modules. After installing the new kernel, be sure to run 'lilo'. More details about this issue may be found in the Common Vulnerabilities and Exposures (CVE) database: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0985
Severity
High Severity
Classification
Related Vulnerabilities