Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 506
Alerts This Week
Warning Icon 1 506

Ubuntu 16.04: 0014-1 Critical: DoS Kernel Issues Resolved

ubuntu
Calendar Grey December 7, 2016
Scroller Ubuntu
Multiple critical vulnerabilities in the Linux kernel have been patched in Ubuntu. It is essential to perform an update promptly to protect your device.
Several security issues were fixed in the kernel.

Summary

Several security issues were fixed in the kernel.

Software Description:

- linux: Linux kernel

Details:

Philip Pettersson discovered a race condition in the af_packet

implementation in the Linux kernel. A local unprivileged attacker could use

this to cause a denial of service (system crash) or run arbitrary code with

administrative privileges. (CVE-2016-8655)

Pengfei Wang discovered a race condition in the Adaptec AAC RAID controller

driver in the Linux kernel when handling ioctl()s. A local attacker could

use this to cause a denial of service (system crash). (CVE-2016-6480)

Marco Grassi discovered a use-after-free condition could occur in the TCP

retransmit queue handling code in the Linux kernel. A local attacker could

use this to cause a denial of service (system crash) or possibly execute

arbitrary code. (CVE-2016-6828)

Topics%20covered

Topics Covered

security advisory denial of service critical Ubuntu kernel update instructions system crash

Update Instructions

The problem can be corrected by updating your livepatches to the following
versions:

| Kernel          | Version  | flavors                  |
|-----------------+----------+--------------------------|
| 4.4.0-21.37     | 15.1     | generic, lowlatency      |
| 4.4.0-22.39     | 15.1     | generic, lowlatency      |
| 4.4.0-22.40     | 15.1     | generic, lowlatency      |
| 4.4.0-24.43     | 15.1     | generic, lowlatency      |
| 4.4.0-28.47     | 15.1     | generic, lowlatency      |
| 4.4.0-31.50     | 15.1     | generic, lowlatency      |
| 4.4.0-34.53     | 15.1     | generic, lowlatency      |
| 4.4.0-36.55     | 15.1     | generic, lowlatency      |
| 4.4.0-38.57     | 15.1     | generic, lowlatency      |
| 4.4.0-42.62     | 15.1     | generic, lowlatency      |
| 4.4.0-43.63     | 15.1     | generic, lowlatency      |
| 4.4.0-45.66     | 15.1     | generic, lowlatency      |
| 4.4.0-47.68     | 15.1     | generic, lowlatency      |
| 4.4.0-51.72     | 15.1     | generic, lowlatency      |

Additionally, you should install an updated kernel with these fixes and
reboot at your convienience.

References

CVE-2016-6480, CVE-2016-6828, CVE-2016-8655

Severity
critical
Lowest
Low
Medium
High
Critical

December 07, 2016

Topics%20covered

Topics Covered

security advisory denial of service critical Ubuntu kernel update instructions system crash

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.