Linux Kernel DM-Crypt本地信息泄露漏洞

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

Linux kernel 2.6 -test6

Linux patch-2.6.16-rc1.bz2

http://kernel.org/pub/linux/kernel/v2.6/testing/patch-2.6.16-rc1.bz2

Linux kernel 2.6 -test4

Linux patch-2.6.16-rc1.bz2

http://kernel.org/pub/linux/kernel/v2.6/testing/patch-2.6.16-rc1.bz2

Linux kernel 2.6 -test2

Linux patch-2.6.16-rc1.bz2

http://kernel.org/pub/linux/kernel/v2.6/testing/patch-2.6.16-rc1.bz2

Linux kernel 2.6 -test11

Linux patch-2.6.16-rc1.bz2

http://kernel.org/pub/linux/kernel/v2.6/testing/patch-2.6.16-rc1.bz2

Linux kernel 2.6 -test9-CVS

Linux patch-2.6.16-rc1.bz2

http://kernel.org/pub/linux/kernel/v2.6/testing/patch-2.6.16-rc1.bz2

Linux kernel 2.6

Debian kernel-headers-2.6-amd64-generic_103sarge1_amd64.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/k/kernel-latest-2.6-amd64 /kernel-headers-2.6-amd64-generic_103sarge1_amd64.deb

Debian kernel-headers-2.6-amd64-k8-smp_103sarge1_amd64.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/k/kernel-latest-2.6-amd64 /kernel-headers-2.6-amd64-k8-smp_103sarge1_amd64.deb

Debian kernel-headers-2.6-amd64-k8_103sarge1_amd64.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/k/kernel-latest-2.6-amd64 /kernel-headers-2.6-amd64-k8_103sarge1_amd64.deb

Debian kernel-headers-2.6-em64t-p4-smp_103sarge1_amd64.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/k/kernel-latest-2.6-amd64 /kernel-headers-2.6-em64t-p4-smp_103sarge1_amd64.deb

Debian kernel-headers-2.6-em64t-p4_103sarge1_amd64.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/k/kernel-latest-2.6-amd64 /kernel-headers-2.6-em64t-p4_103sarge1_amd64.deb

Debian kernel-headers-2.6-generic_101sarge1_alpha.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/k/kernel-latest-2.6-alpha /kernel-headers-2.6-generic_101sarge1_alpha.deb

Debian kernel-headers-2.6-itanium-smp_2.6.8-14sarge2_ia64.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/k/kernel-image-2.6.8-ia64 /kernel-headers-2.6-itanium-smp_2.6.8-14sarge2_ia64.deb

Debian kernel-headers-2.6-itanium_2.6.8-14sarge2_ia64.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/k/kernel-image-2.6.8-ia64 /kernel-headers-2.6-itanium_2.6.8-14sarge2_ia64.deb

Debian kernel-headers-2.6-smp_101sarge1_alpha.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/k/kernel-latest-2.6-alpha /kernel-headers-2.6-smp_101sarge1_alpha.deb

Debian kernel-headers-2.6-sparc32_101sarge1_sparc.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/k/kernel-latest-2.6-sparc /kernel-headers-2.6-sparc32_101sarge1_sparc.deb

Debian kernel-headers-2.6-sparc64-smp_101sarge1_sparc.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/k/kernel-latest-2.6-sparc /kernel-headers-2.6-sparc64-smp_101sarge1_sparc.deb

Debian kernel-headers-2.6-sparc64_101sarge1_sparc.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/k/kernel-latest-2.6-sparc /kernel-headers-2.6-sparc64_101sarge1_sparc.deb

Debian kernel-image-2.4-powerpc_102sarge1_powerpc.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/k/kernel-latest-powerpc/k ernel-image-2.4-powerpc_102sarge1_powerpc.deb

Debian kernel-image-2.6-amd64-generic_103sarge1_amd64.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/k/kernel-latest-2.6-amd64 /kernel-image-2.6-amd64-generic_103sarge1_amd64.deb

Debian kernel-image-2.6-amd64-k8-smp_103sarge1_amd64.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/k/kernel-latest-2.6-amd64 /kernel-image-2.6-amd64-k8-smp_103sarge1_amd64.deb

Debian kernel-image-2.6-amd64-k8_103sarge1_amd64.deb

Debian GNU/Linux 3.1 alias sarge

http://security.debian.org/pool/updates/main/k/kernel-latest-2.6-amd64 /kernel-image-2.6-amd64-k8_103sarge1_amd64.deb

来源: MLIST

名称: [linux-kernel] 20060104 [Patch 2.6] dm-crypt: zero key before freeing it

链接:http://marc.theaimsgroup.com/?l=linux-kernel&m=113640535312572&w=2

来源: MLIST

名称: [linux-kernel] 20060104 [Patch 2.6] dm-crypt: Zero key material before free to avoid information leak

链接:http://marc.theaimsgroup.com/?l=linux-kernel&m=113641114812886&w=2

来源: XF

名称: kernel-dmcrypt-information-disclosure(24189)

链接:http://xforce.iss.net/xforce/xfdb/24189

来源: UBUNTU

名称: USN-244-1

链接:http://www.ubuntulinux.org/support/documentation/usn/usn-244-1

来源: TRUSTIX

名称: 2006-0004

链接:http://www.trustix.org/errata/2006/0004

来源: BID

名称: 16301

链接:http://www.securityfocus.com/bid/16301

来源: FEDORA

名称: FLSA:157459-4

链接:http://www.securityfocus.com/archive/1/archive/1/427981/100/0/threaded

来源: REDHAT

名称: RHSA-2006:0132

链接:http://www.redhat.com/support/errata/RHSA-2006-0132.html

来源: FEDORA

名称: FEDORA-2006-102

链接:http://www.redhat.com/archives/fedora-announce-list/2006-February/msg00037.html

来源: OSVDB

名称: 22418

链接:http://www.osvdb.org/22418

来源: SUSE

名称: SUSE-SA:2006:028

链接:http://www.novell.com/linux/security/advisories/2006-05-31.html

来源: MANDRIVA

名称: MDKSA-2006:040

链接:http://www.mandriva.com/security/advisories?name=MDKSA-2006:040

来源: VUPEN

名称: ADV-2006-0235

链接:http://www.frsirt.com/english/advisories/2006/0235

来源: DEBIAN

名称: DSA-1017

链接:http://www.debian.org/security/2006/dsa-1017

来源: SECTRACK

名称: 1015740

链接:http://securitytracker.com/id?1015740

来源: SREASON

名称: 388

链接:http://securityreason.com/securityalert/388

来源: SECUNIA

名称: 20398

链接:http://secunia.com/advisories/20398

来源: SECUNIA

名称: 19374

链接:http://secunia.com/advisories/19374

来源: SECUNIA

名称: 19160

链接:http://secunia.com/advisories/19160

来源: SECUNIA

名称: 18774

链接:http://secunia.com/advisories/18774

来源: SECUNIA

名称: 18527

链接:http://secunia.com/advisories/18527

来源: SECUNIA

名称: 18487

链接:http://secunia.com/advisories/18487

来源: MANDRIVA

名称: MDKSA-2006:040

链接:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:040