[USN-2177-1] Linux kernel (Saucy HWE) vulnerabilities

Severity High

CVEs 3

Several security issues were fixed in the kernel.

A flaw was discovered in the Kernel Virtual Machine (KVM) subsystem of the
Linux kernel. A guest OS user could exploit this flaw to execute arbitrary
code on the host OS. (CVE-2014-0049)

Al Viro discovered an error in how CIFS in the Linux kernel handles
uncached write operations. An unprivileged local user could exploit this
flaw to cause a denial of service (system crash), obtain sensitive
information from kernel memory, or possibly gain privileges.
(CVE-2014-0069)

Jouni Malinen reported a flaw in the handling of fragmentation in the
mac8Linux subsystem of the kernel. A remote attacker could exploit this
flaw to obtain potential sensitive cleartext information by reading
packets. (CVE-2014-8709)

ID

USN-2177-1

Severity

high

Severity from

CVE-2014-0049

URL

https://ubuntu.com/security/notices/USN-2177-1

Published