[USN-2463-1] Linux kernel vulnerabilities

Severity High

CVEs 2

Several security issues were fixed in the kernel.

A race condition with MMIO and PIO transactions in the KVM (Kernel Virtual
Machine) subsystem of the Linux kernel was discovered. A guest OS user
could exploit this flaw to cause a denial of service (guest OS crash) via a
specially crafted application. (CVE-2014-7842)

The KVM (kernel virtual machine) subsystem of the Linux kernel
miscalculates the number of memory pages during the handling of a mapping
failure. A guest OS user could exploit this to cause a denial of service
(host OS page unpinning) or possibly have unspecified other impact by
leveraging guest OS privileges. (CVE-2014-8369)

ID

USN-2463-1

Severity

high

Severity from

CVE-2014-8369

URL

https://ubuntu.com/security/notices/USN-2463-1

Published