---

Debian, Red Hat and CentOS All Patch the Stack Clash Linux Kernel Vulnerability

Immediately after Qualys Research Labs reported that they found a Linux kernel flaw, which they call Stack Clash, which could allow an attacker to escalate his/her privileges on an unpatched machine because the size of the stack guard page is not sufficiently large, big GNU/Linux companies like Red Hat, Debian and Canonical have announced new kernel security updates for their supported OSes. On the other side of the camp, Red Hat announced that they patched the Stack Clash vulnerability in the kernel packages of Red Hat Enterprise Linux Desktop 7, Red Hat Enterprise Linux Server 7, Red Hat Enterprise Linux Workstation 7.3, Red Hat Enterprise Linux Server TUS 7.3, and Red Hat Enterprise Linux HPC Node 7 operating systems, which means that CentOS 7 users have also received the updated kernel (version 3.10.0-514.21.2.el7). All users are urged to update their installations as soon as possible!