[USN-2415-1] Linux kernel vulnerability

Severity High

CVEs 2

The system could be made to deny write access to files.

Don Bailey discovered a flaw in the LZO decompress algorithm used by the
Linux kernel. An attacker could exploit this flaw to cause a denial of
service (memory corruption or OOPS). (CVE-2014-4608)

Andy Lutomirski discovered that the Linux kernel was not checking the
CAP_SYS_ADMIN when remounting filesystems to read-only. A local user could
exploit this flaw to cause a denial of service (loss of writability).
(CVE-2014-7975)

ID

USN-2415-1

Severity

high

Severity from

CVE-2014-4608

URL

https://ubuntu.com/security/notices/USN-2415-1

Published