[USN-2795-1] Linux kernel (Trusty HWE) vulnerabilities

Severity Medium

CVEs 2

Several security issues were fixed in the kernel.

It was discovered that in certain situations, a directory could be renamed
outside of a bind mounted location. An attacker could use this to escape
bind mount containment and gain access to sensitive information.
(CVE-2015-2925)

Moein Ghasemzadeh discovered that the USB WhiteHEAT serial driver contained
hardcoded attributes about the USB devices. An attacker could construct a
fake WhiteHEAT USB device that, when inserted, causes a denial of service
(system crash). (CVE-2015-5257)

ID

USN-2795-1

Severity

medium

Severity from

CVE-2015-2925

URL

https://ubuntu.com/security/notices/USN-2795-1

Published