USN-3190-1: Linux kernel vulnerabilities
USN-3190-1: Linux kernel vulnerabilities Ubuntu Security Notice USN-3190-1 3rd February, 2017 linux vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.10 Summary Several security issues were fixed in the kernel. Software description linux – Linux kernel Details Mikulas Patocka discovered that the asynchronous multibuffer cryptographicdaemon (mcryptd) in the Linux kernel did not properly handle being invokedwith incompatible algorithms. A local attacker could use this to cause adenial of service (system crash). (CVE-2016-10147) It was discovered that a use-after-free existed in the KVM susbsystem ofthe Linux kernel when creating devices. A local attacker could use this tocause a denial of service (system crash). (CVE-2016-10150) Qidan He discovered that the ICMP implementation in the Linux kernel didnot properly check the size of an ICMP header. A local attacker withCAP_NET_ADMIN could use this to expose sensitive information.(CVE-2016-8399) Qian [ more… ]
