ASA-201612-6 generated external raw

[ASA-201612-6] linux: privilege escalation
Arch <a href="/package/linux">Linux</a> Security Advisory ASA-201612-6 ========================================= Severity: High Date : 2016-12-06 CVE-ID : CVE-2016-8655 Package : linux Type : privilege escalation Remote : No Link : Summary ======= The package <a href="/package/linux">linux</a> before version 4.8.12-2 is vulnerable to privilege escalation. Resolution ========== Upgrade to 4.8.12-2. # pacman -Syu "linux>=4.8.12-2" The problem has been fixed upstream but no release is available yet. Workaround ========== None. Description =========== Philip Pettersson discovered a race condition in the af_packet implementation in the <a href="/package/linux">Linux</a> kernel. A local unprivileged attacker could use this to cause a denial of service (system crash) or run arbitrary code with administrative privileges. Impact ====== A local unprivileged attacker is able to crash the system or run arbitrary code with administrative privileges. References ==========