[USN-2829-1] Linux kernel vulnerabilities

Severity Medium

CVEs 2

Several security issues were fixed in the kernel.

It was discovered that the SCTP protocol implementation in the Linux kernel
performed an incorrect sequence of protocol-initialization steps. A local
attacker could use this to cause a denial of service (system crash).
(CVE-2015-5283)

Dmitry Vyukov discovered that the Linux kernel's keyring handler attempted
to garbage collect incompletely instantiated keys. A local unprivileged
attacker could use this to cause a denial of service (system crash).
(CVE-2015-7872)

ID

USN-2829-1

Severity

medium

Severity from

CVE-2015-5283

URL

https://ubuntu.com/security/notices/USN-2829-1

Published