Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 584
Alerts This Week
Warning Icon 1 584

Ubuntu 16.04 LTS: USN-3161-1 Critical Update for Kernel Issues

ubuntu
Calendar Grey December 20, 2016
Scroller Ubuntu
=========================================================================Ubuntu Security Notice USN-
Several security issues were fixed in the kernel.

Summary

Several security issues were fixed in the kernel.

Software Description:

- linux: Linux kernel

Details:

Tilman Schmidt and Sasha Levin discovered a use-after-free condition in the

TTY implementation in the Linux kernel. A local attacker could use this to

expose sensitive information (kernel memory). (CVE-2015-8964)

It was discovered that the Video For Linux Two (v4l2) implementation in the

Linux kernel did not properly handle multiple planes when processing a

VIDIOC_DQBUF ioctl(). A local attacker could use this to cause a denial of

service (system crash) or possibly execute arbitrary code. (CVE-2016-4568)

CAI Qian discovered that shared bind mounts in a mount namespace

exponentially added entries without restriction to the Linux kernel's mount

table. A local attacker could use this to cause a denial of service (system

crash). (CVE-2016-6213)

It was discovered that the KVM implementation for x86/x86_64 in the Linux

kernel could dereference a null pointer. An attacker in a gues...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow Ubuntu critical update kernel

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  linux-image-4.4.0-57-generic    4.4.0-57.78
  linux-image-4.4.0-57-generic-lpae  4.4.0-57.78
  linux-image-4.4.0-57-lowlatency  4.4.0-57.78
  linux-image-4.4.0-57-powerpc-e500mc  4.4.0-57.78
  linux-image-4.4.0-57-powerpc-smp  4.4.0-57.78
  linux-image-4.4.0-57-powerpc64-emb  4.4.0-57.78
  linux-image-4.4.0-57-powerpc64-smp  4.4.0-57.78
  linux-image-generic             4.4.0.57.60
  linux-image-generic-lpae        4.4.0.57.60
  linux-image-lowlatency          4.4.0.57.60
  linux-image-powerpc-e500mc      4.4.0.57.60
  linux-image-powerpc-smp         4.4.0.57.60
  linux-image-powerpc64-emb       4.4.0.57.60
  linux-image-powerpc64-smp       4.4.0.57.60

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References

https://ubuntu.com/security/notices/USN-3161-1

CVE-2015-8964, CVE-2016-4568, CVE-2016-6213, CVE-2016-8630,

CVE-2016-8633, CVE-2016-8645, CVE-2016-9555

Severity
critical
Lowest
Low
Medium
High
Critical

December 20, 2016

Topics%20covered

Topics Covered

security advisory denial of service buffer overflow Ubuntu critical update kernel

Package Information

https://launchpad.net/ubuntu/+source/linux/4.4.0-57.78

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.