[USN-2512-1] Linux kernel (EC2) vulnerabilities

Severity Medium

CVEs 2

Several security issues were fixed in the kernel.

A race condition was discovered in the Linux kernel's key ring. A local
user could cause a denial of service (memory corruption or panic) or
possibly have unspecified impact via the keyctl commands. (CVE-2014-9529)

A memory leak was discovered in the ISO 9660 CDROM file system when parsing
rock ridge ER records. A local user could exploit this flaw to obtain
sensitive information from kernel memory via a crafted iso9660 image.
(CVE-2014-9584)

ID

USN-2512-1

Severity

medium

Severity from

CVE-2014-9529

URL

https://ubuntu.com/security/notices/USN-2512-1

Published