Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
172
security advisorydenial of servicekernel updateUbuntu 16.04: USN-3151-3 Critical Denial Of Service in Snapdragon Kernel
The system could be made to crash or run programs as an administrator.. =========================================================================Ubuntu Security Notice USN-3151-3 December 05, 2016 linux-snapdragon vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: The system could be made to crash or run programs as an administrator. Software Description: - linux-snapdragon: Linux kernel for Snapdragon Processors Details: Philip Pettersson discovered a race condition in the af_packet implementation in the Linux kernel. A local unprivileged attacker could use this to cause a denial of service (system crash) or run arbitrary code with administrative privileges. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS: linux-image-4.4.0-1039-snapdragon 4.4.0-1039.43 linux-image-snapdragon 4.4.0.1039.31 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-3151-3 https://ubuntu.com/security/notices/USN-3151-1 CVE-2016-8655 Package Information: https://launchpad.net/ubuntu/+source/linux-snapdragon/4.4.0-1039.43 . The latest Ubuntu Security Notice USN-3162-4 highlights a severe issue in the linux-raspberry service that may cause system failures or privilege escalation. snapdragon kernel, ubuntu security, linux crash risk, system reboot, kernel update. . Severity: Critical.LinuxSecurity.com Team
Dec 06, 2016
•Critical
Ubuntu
172
security advisorydenial of servicecritical issueUbuntu 16.04 LTS USN-3084-4 Critical: Kernel Denial Of Service
Several security issues were fixed in the kernel.. =========================================================================Ubuntu Security Notice USN-3084-4 September 19, 2016 linux-snapdragon vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: Several security issues were fixed in the kernel. Software Description: - linux-snapdragon: Linux kernel for Snapdragon Processors Details: Pengfei Wang discovered a race condition in the audit subsystem in the Linux kernel. A local attacker could use this to corrupt audit logs or disrupt system-call auditing. (CVE-2016-6136) It was discovered that the powerpc and powerpc64 hypervisor-mode KVM implementation in the Linux kernel for did not properly maintain state about transactional memory. An unprivileged attacker in a guest could cause a denial of service (CPU lockup) in the host OS. (CVE-2016-5412) Pengfei Wang discovered a race condition in the Chrome OS embedded controller device driver in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2016-6156) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS: linux-image-4.4.0-1026-snapdragon 4.4.0-1026.29 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-3084-4 CVE-2016-5412, CVE-2016-6136, CVE-2016-6156 Package Information: https://launchpad.net/ubuntu/+source/linux-snapdragon/4.4.0-1026.29 . Important security patch for Ubuntu 16.04 LTS addressing kernel flaws impacting Snapdragon systems. Urgent measures required.. Ubuntu kernel vulnerabilities, Snapdragon, Linux security patches. . Severity: Critical. LinuxSecurity.com Team
Sep 19, 2016
•Critical
Ubuntu
172
security advisorydenial of servicesecurity fixUbuntu 16.04 LTS: USN-3057-1 Moderate: Kernel SnapDragn DoS Issues
Several security issues were fixed in the kernel.. =========================================================================Ubuntu Security Notice USN-3057-1 August 10, 2016 linux-snapdragon vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: Several security issues were fixed in the kernel. Software Description: - linux-snapdragon: Linux kernel for Snapdragon Processors Details: Ben Hawkes discovered an integer overflow in the Linux netfilter implementation. On systems running 32 bit kernels, a local unprivileged attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code with administrative privileges. (CVE-2016-3135) It was discovered that the keyring implementation in the Linux kernel did not ensure a data structure was initialized before referencing it after an error condition occurred. A local attacker could use this to cause a denial of service (system crash). (CVE-2016-4470) Sasha Levin discovered that a use-after-free existed in the percpu allocator in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code with administrative privileges. (CVE-2016-4794) Kangjie Lu discovered an information leak in the netlink implementation of the Linux kernel. A local attacker could use this to obtain sensitive information from kernel memory. (CVE-2016-5243) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS: linux-image-4.4.0-1022-snapdragon 4.4.0-1022.25 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernelmodules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-3057-1 CVE-2016-3135, CVE-2016-4470, CVE-2016-4794, CVE-2016-5243 Package Information: https://launchpad.net/ubuntu/+source/linux-snapdragon/4.4.0-1022.25 . Several vulnerabilities resolved in Ubuntu's Linux kernel designated for Snapdragon chipsets, accompanied by detailed update guidelines.. linux kernel issues, ubuntu patch, snapdragon update, security management. . LinuxSecurity.com Team
Aug 10, 2016
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!