MGASA-2017-0260

    Dashboard / Vulnerabilities / MGASA-2017-0260

    MGASA-2017-0260

    Published: 13 Aug 2017Last Modified: 16 Apr 2026
    Upstream:
    CVE-2017-10810

    Summary: Updated kernel-linus packages fixes security and other bugs

    Details: This kernel-linus update is based on upstream 4.4.79 and fixes at least the following security issues: Linux kernel built with the VirtIO GPU driver(CONFIG_DRM_VIRTIO_GPU) support is vulnerable to a memory leakage issue. It could occur while creating a virtio gpu object in virtio_gpu_object_create(). A user/process could use this flaw to leak host kernel memory potentially resulting in Dos (CVE-2017-10810). It also contains followup fixes to the Stack Clash (CVE-2017-1000370, CVE-2017-1000371) security issues resolved in kernels released at end of June, 2017. For other upstream fixes in this update, read the referenced changelogs.

    References: https://advisories.mageia.org/MGASA-2017-0260.html, https://bugs.mageia.org/show_bug.cgi?id=21391, https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.75, https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.76, https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.77, https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.78, https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.4.79

    Affected packages

    Package

    Name: kernel-linus

    Purl: pkg:rpm/mageia/kernel-linus?arch=source&distro=mageia-5

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -4.4.79-1.mga5

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High