[USN-2751-1] Linux kernel (Vivid HWE) vulnerabilities

Severity Medium
Affected Packages 8
CVEs 2

Several security issues were fixed in the kernel.

Benjamin Randazzo discovered an information leak in the md (multiple
device) driver when the bitmap_info.file is disabled. A local privileged
attacker could use this to obtain sensitive information from the kernel.
(CVE-2015-5697)

Marc-André Lureau discovered that the vhost driver did not properly
release the userspace provided log file descriptor. A privileged attacker
could use this to cause a denial of service (resource exhaustion).
(CVE-2015-6252)

Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/linux-image-extra-3.19.0-30-generic?distro=trusty ubuntu linux-image-extra-3.19.0-30-generic < 3.19.0-30.33~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-3.19.0-30-powerpc64-smp?distro=trusty ubuntu linux-image-3.19.0-30-powerpc64-smp < 3.19.0-30.33~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-3.19.0-30-powerpc64-emb?distro=trusty ubuntu linux-image-3.19.0-30-powerpc64-emb < 3.19.0-30.33~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-3.19.0-30-powerpc-smp?distro=trusty ubuntu linux-image-3.19.0-30-powerpc-smp < 3.19.0-30.33~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-3.19.0-30-powerpc-e500mc?distro=trusty ubuntu linux-image-3.19.0-30-powerpc-e500mc < 3.19.0-30.33~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-3.19.0-30-lowlatency?distro=trusty ubuntu linux-image-3.19.0-30-lowlatency < 3.19.0-30.33~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-3.19.0-30-generic?distro=trusty ubuntu linux-image-3.19.0-30-generic < 3.19.0-30.33~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-3.19.0-30-generic-lpae?distro=trusty ubuntu linux-image-3.19.0-30-generic-lpae < 3.19.0-30.33~14.04.1 trusty
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date
Loading...