Linux Kernel tty_ioctl Vulnerability

Summary

A race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel may allow local users to obtain sensitive information from kernel memory or cause a denial of service.

Affected Products

FortiOS 5.4.0 to 5.4.3 FortiOS 5.4.0 to 5.4.3 FortiOS 5.4.0 to 5.4.3 FortiOS 5.4.0 to 5.4.3 FortiOS 5.4.0 to 5.4.3 FortiOS 5.4.0 to 5.4.3 FortiOS 5.4.0 to 5.4.3

Solutions

Upgrade to FortiOS version Upgrade to FortiOS version Upgrade to FortiOS version Upgrade to FortiOS version Upgrade to FortiOS version Upgrade to FortiOS version Upgrade to FortiOS version 5.4.4 or 5.6.0 5.4.4 or 5.6.0 5.4.4 or 5.6.0 5.4.4 or 5.6.0 5.4.4 or 5.6.0 5.4.4 or 5.6.0 5.4.4 or 5.6.0

References

• https://nvd.nist.gov/vuln/detail/CVE-2016-0723