Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Ubuntu 15.10 USN-2908-4 Critical: Linux Kernel Graphics Issue Fix

ubuntu
Calendar Grey February 26, 2016
Scroller Ubuntu
On March 15, 2021, USN-4652-1 addresses a significant vulnerability in the Linux kernel impacting Ubuntu 20.04 instances.
USN-2908-1 introduced a regression in the Linux kernel.

Summary

USN-2908-1 introduced a regression in the Linux kernel.

Software Description:

- linux: Linux kernel

Details:

USN-2908-1 fixed vulnerabilities in the Linux kernel for Ubuntu

15.10. An incorrect locking fix caused a regression that broke

graphics displays for Ubuntu 15.10 guests running within VMWare

virtual machines. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

halfdog discovered that OverlayFS, when mounting on top of a FUSE mount,

incorrectly propagated file attributes, including setuid. A local

unprivileged attacker could use this to gain privileges. (CVE-2016-1576)

halfdog discovered that OverlayFS in the Linux kernel incorrectly

propagated security sensitive extended attributes, such as POSIX ACLs. A

local unprivileged attacker could use this to gain privileges.

(CVE-2016-1575)

It was discovered that the Linux kernel did not properly enforce rlimits

for file descriptors sent over UNIX...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory local attack ubuntu linux update kernel regression graphics issue

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 15.10:
  linux-image-4.2.0-30-generic    4.2.0-30.36
  linux-image-4.2.0-30-generic-lpae  4.2.0-30.36
  linux-image-4.2.0-30-lowlatency  4.2.0-30.36
  linux-image-4.2.0-30-powerpc-e500mc  4.2.0-30.36
  linux-image-4.2.0-30-powerpc-smp  4.2.0-30.36
  linux-image-4.2.0-30-powerpc64-emb  4.2.0-30.36
  linux-image-4.2.0-30-powerpc64-smp  4.2.0-30.36

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2908-4

https://ubuntu.com/security/notices/USN-2908-1

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1548587

Severity
critical
Lowest
Low
Medium
High
Critical

February 26, 2016

Topics%20covered

Topics Covered

security advisory local attack ubuntu linux update kernel regression graphics issue

Package Information

https://launchpad.net/ubuntu/+source/linux/4.2.0-30.36

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.