USN-3314-1: Linux kernel vulnerabilities
USN-3314-1: Linux kernel vulnerabilities Ubuntu Security Notice USN-3314-1 7th June, 2017 linux, linux-raspi2 vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 17.04 Summary Several security issues were fixed in the Linux kernel. Software description linux – Linux kernel linux-raspi2 – Linux kernel for Raspberry Pi 2 Details It was discovered that the keyring implementation in the Linux kernel insome situations did not prevent special internal keyrings from being joinedby userspace keyrings. A privileged local attacker could use this to bypassmodule verification. (CVE-2016-9604) It was discovered that a buffer overflow existed in the trace subsystem inthe Linux kernel. A privileged local attacker could use this to executearbitrary code. (CVE-2017-0605) Daniel Jiang discovered that a race condition existed in the ipv4 pingsocket implementation in the Linux kernel. A local privileged attackercould use this to cause a denial [ more… ]
