Rebase F16 to the 3.2.1 stable release. Also fixes CVEs :

  - CVE-2012-0056

    - CVE-2011-4127

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Juri Aedla discovered that the kernel incorrectly handled /proc/<pid>/mem permissions. A local attacker could exploit this and gain root privileges.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:0061 advisory.

    The kernel-rt packages contain the Linux kernel, the core of any Linux     operating system.

    This update fixes the following security issue:

    * It was found that permissions were not checked properly in the Linux     kernel when handling the /proc/[pid]/mem writing functionality. A local,     unprivileged user could use this flaw to escalate their privileges. Refer     to Red Hat Knowledgebase article DOC-69129, linked to in the References,     for further information. (CVE-2012-0056, Important)

    Red Hat would like to thank Jri Aedla for reporting this issue.

    Users should upgrade to these updated packages, which correct this issue.
    The system must be rebooted for this update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2012-0052 advisory.

    - [fs] Revert 'proc: enable writing to /proc/pid/mem' (Johannes Weiner) [782649 782650] {CVE-2012-0056}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-2001 advisory.

    - Revert proc: enable writing to /proc/pid/mem [orabug 13619701] {CVE-2012-0056}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check     permissions when writing to /proc/<pid>/mem, which allows local users to gain privileges by modifying     process memory, as demonstrated by Mempodipper. (CVE-2012-0056)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
57674	Fedora 16 : kernel-3.2.1-3.fc16 (2012-0876)	Nessus	Fedora Local Security Checks	2012/1/25	2021/1/11	medium
57697	Ubuntu 10.04 LTS : linux-lts-backport-oneiric vulnerability (USN-1342-1)	Nessus	Ubuntu Local Security Checks	2012/1/26	2019/9/19	medium
76636	RHEL 6 : kernel-rt (RHSA-2012:0061)	Nessus	Red Hat Local Security Checks	2014/7/22	2025/4/15	high
68435	Oracle Linux 6 : kernel (ELSA-2012-0052)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2026/2/9	high
68668	Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2012-2001)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2026/2/9	high
217573	Linux Distros Unpatched Vulnerability : CVE-2012-0056	Nessus	Misc.	2025/3/4	2026/1/28	medium

检测

插件搜索

medium

medium

high

high

high

medium