[USN-2633-1] Linux kernel (Trusty HWE) vulnerabilities

Severity High

CVEs 2

Several security issues were fixed in the kernel.

Wen Xu discovered a use-after-free flaw in the Linux kernel's ipv4 ping
support. A local user could exploit this flaw to cause a denial of service
(system crash) or gain administrative privileges on the system.
(CVE-2015-3636)

A memory corruption flaw was discovered in the Linux kernel's scsi
subsystem. A local attacker could potentially exploit this flaw to cause a
denial of service (system crash). (CVE-2015-4036)

ID

USN-2633-1

Severity

high

Severity from

CVE-2015-4036

URL

https://ubuntu.com/security/notices/USN-2633-1

Published