Ubuntu 17.10 USN-3657-1 Critical: Kernel Issues Impacting Raspberry Pi 2

Several security issues were fixed in the Linux kernel.

Software Description:

- linux-raspi2: Linux kernel for Raspberry Pi 2

Details:

It was discovered that the netlink subsystem in the Linux kernel did not

properly restrict observations of netlink messages to the appropriate net

namespace. A local attacker could use this to expose sensitive information

(kernel netlink traffic). (CVE-2017-17449)

Tuba Yavuz discovered that a double-free error existed in the USBTV007

driver of the Linux kernel. A local attacker could use this to cause a

denial of service (system crash) or possibly execute arbitrary code.

(CVE-2017-17975)

It was discovered that a race condition existed in the Device Mapper

component of the Linux kernel. A local attacker could use this to cause a

denial of service (system crash). (CVE-2017-18203)

It was discovered that an infinite loop could occur in the madvise(2)

implementation in the Linux kernel in certain circumstances. A local

attacker could use this to ca...