USN-3052-1: Linux kernel vulnerabilities
USN-3052-1: Linux kernel vulnerabilities Ubuntu Security Notice USN-3052-1 10th August, 2016 linux vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 14.04 LTS Summary Several security issues were fixed in the kernel. Software description linux – Linux kernel Details It was discovered that the keyring implementation in the Linux kernel didnot ensure a data structure was initialized before referencing it after anerror condition occurred. A local attacker could use this to cause a denialof service (system crash). (CVE-2016-4470) Kangjie Lu discovered an information leak in the netlink implementation ofthe Linux kernel. A local attacker could use this to obtain sensitiveinformation from kernel memory. (CVE-2016-5243) Update instructions The problem can be corrected by updating your system to the following package version: Ubuntu 14.04 LTS: linux-image-3.13.0-93-lowlatency 3.13.0-93.140 linux-image-3.13.0-93-powerpc-e500mc 3.13.0-93.140 linux-image-3.13.0-93-powerpc64-emb 3.13.0-93.140 linux-image-3.13.0-93-powerpc-e500 3.13.0-93.140 linux-image-3.13.0-93-generic 3.13.0-93.140 linux-image-3.13.0-93-powerpc-smp 3.13.0-93.140 linux-image-3.13.0-93-generic-lpae [ more… ]