Debian: DSA-3434-1 Critical: Information Leak And Privilege Escalation

CVE-2015-7513

It was discovered that a local user permitted to use the x86 KVM
subsystem could configure the PIT emulation to cause a denial of
service (crash).

CVE-2015-7550

Dmitry Vyukov discovered a race condition in the keyring subsystem
that allows a local user to cause a denial of service (crash).

CVE-2015-8543

It was discovered that a local user permitted to create raw sockets
could cause a denial-of-service by specifying an invalid protocol
number for the socket. The attacker must have the CAP_NET_RAW
capability.

CVE-2015-8550

Felix Wilhelm of ERNW discovered that the Xen PV backend drivers may read critical data from shared memory multiple times. This
flaw can be used by a guest kernel to cause a denial of service
(crash) on the host, or possibly for privilege escalation.

CVE-2015-8551 / CVE-2015-8552

Konrad Rzeszutek Wilk of Oracle discovered that the Xen PCI
backend driver does not adequately validate the device state when
a gue...