지락문화예술공작단

USN-2989-1: Linux kernel vulnerabilities Ubuntu Security Notice USN-2989-1 1st June, 2016 linux vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 14.04 LTS Summary Several security issues were fixed in the kernel. Software description linux – Linux kernel Details Justin Yackoski discovered that the Atheros L2 Ethernet Driver in the Linuxkernel incorrectly enables scatter/gather I/O. A remote attacker could usethis to obtain potentially sensitive information from kernel memory.(CVE-2016-2117) Jason A. Donenfeld discovered multiple out-of-bounds reads in the OZMO USBover wifi device drivers in the Linux kernel. A remote attacker could usethis to cause a denial of service (system crash) or obtain potentiallysensitive information from kernel memory. (CVE-2015-4004) Andy Lutomirski discovered a race condition in the Linux kernel'stranslation lookaside buffer (TLB) handling of flush events. A localattacker could use this to cause a denial of service or [ more… ]