[USN-2931-1] Linux kernel (Utopic HWE) vulnerabilities

Severity High

Affected Packages 8

CVEs 12

Several security issues were fixed in the kernel.

Ben Hawkes discovered that the Linux netfilter implementation did not
correctly perform validation when handling IPT_SO_SET_REPLACE events. A
local unprivileged attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code with administrative
privileges. (CVE-2016-3134)

It was discovered that the Linux kernel did not properly enforce rlimits
for file descriptors sent over UNIX domain sockets. A local attacker could
use this to cause a denial of service. (CVE-2013-4312)

It was discovered that a race condition existed when handling heartbeat-
timeout events in the SCTP implementation of the Linux kernel. A remote
attacker could use this to cause a denial of service. (CVE-2015-8767)

Andy Lutomirski discovered a race condition in the Linux kernel's
translation lookaside buffer (TLB) handling of flush events. A local
attacker could use this to cause a denial of service or possibly leak
sensitive information. (CVE-2016-2069)

Andrey Konovalov discovered that the ALSA USB MIDI driver incorrectly
performed a double-free. A local attacker with physical access could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code with administrative privileges. (CVE-2016-2384)

Dmitry Vyukov discovered that the Advanced Linux Sound Architecture (ALSA)
framework did not verify that a FIFO was attached to a client before
attempting to clear it. A local attacker could use this to cause a denial
of service (system crash). (CVE-2016-2543)

Dmitry Vyukov discovered that a race condition existed in the Advanced
Linux Sound Architecture (ALSA) framework between timer setup and closing
of the client, resulting in a use-after-free. A local attacker could use
this to cause a denial of service. (CVE-2016-2544)

Dmitry Vyukov discovered a race condition in the timer handling
implementation of the Advanced Linux Sound Architecture (ALSA) framework,
resulting in a use-after-free. A local attacker could use this to cause a
denial of service (system crash). (CVE-2016-2545)

Dmitry Vyukov discovered race conditions in the Advanced Linux Sound
Architecture (ALSA) framework's timer ioctls leading to a use-after-free. A
local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2016-2546)

Dmitry Vyukov discovered that the Advanced Linux Sound Architecture (ALSA)
framework's handling of high resolution timers did not properly manage its
data structures. A local attacker could use this to cause a denial of
service (system hang or crash) or possibly execute arbitrary code.
(CVE-2016-2547, CVE-2016-2548)

Dmitry Vyukov discovered that the Advanced Linux Sound Architecture (ALSA)
framework's handling of high resolution timers could lead to a deadlock
condition. A local attacker could use this to cause a denial of service
(system hang). (CVE-2016-2549)

Package	Affected Version
pkg:deb/ubuntu/linux-image-extra-3.16.0-67-generic?distro=trusty	< 3.16.0-67.87~14.04.1
pkg:deb/ubuntu/linux-image-3.16.0-67-powerpc64-smp?distro=trusty	< 3.16.0-67.87~14.04.1
pkg:deb/ubuntu/linux-image-3.16.0-67-powerpc64-emb?distro=trusty	< 3.16.0-67.87~14.04.1
pkg:deb/ubuntu/linux-image-3.16.0-67-powerpc-smp?distro=trusty	< 3.16.0-67.87~14.04.1
pkg:deb/ubuntu/linux-image-3.16.0-67-powerpc-e500mc?distro=trusty	< 3.16.0-67.87~14.04.1
pkg:deb/ubuntu/linux-image-3.16.0-67-lowlatency?distro=trusty	< 3.16.0-67.87~14.04.1
pkg:deb/ubuntu/linux-image-3.16.0-67-generic?distro=trusty	< 3.16.0-67.87~14.04.1
pkg:deb/ubuntu/linux-image-3.16.0-67-generic-lpae?distro=trusty	< 3.16.0-67.87~14.04.1

ID

USN-2931-1

Severity

high

URL

https://ubuntu.com/security/notices/USN-2931-1

Published

2016-03-14T16:47:32
(8 years ago)

Modified

2016-03-14T16:47:32
(8 years ago)

Other Advisories

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:deb/ubuntu/linux-image-extra-3.16.0-67-generic?distro=trusty	ubuntu	linux-image-extra-3.16.0-67-generic	< 3.16.0-67.87~14.04.1	trusty
Affected	pkg:deb/ubuntu/linux-image-3.16.0-67-powerpc64-smp?distro=trusty	ubuntu	linux-image-3.16.0-67-powerpc64-smp	< 3.16.0-67.87~14.04.1	trusty
Affected	pkg:deb/ubuntu/linux-image-3.16.0-67-powerpc64-emb?distro=trusty	ubuntu	linux-image-3.16.0-67-powerpc64-emb	< 3.16.0-67.87~14.04.1	trusty
Affected	pkg:deb/ubuntu/linux-image-3.16.0-67-powerpc-smp?distro=trusty	ubuntu	linux-image-3.16.0-67-powerpc-smp	< 3.16.0-67.87~14.04.1	trusty
Affected	pkg:deb/ubuntu/linux-image-3.16.0-67-powerpc-e500mc?distro=trusty	ubuntu	linux-image-3.16.0-67-powerpc-e500mc	< 3.16.0-67.87~14.04.1	trusty
Affected	pkg:deb/ubuntu/linux-image-3.16.0-67-lowlatency?distro=trusty	ubuntu	linux-image-3.16.0-67-lowlatency	< 3.16.0-67.87~14.04.1	trusty
Affected	pkg:deb/ubuntu/linux-image-3.16.0-67-generic?distro=trusty	ubuntu	linux-image-3.16.0-67-generic	< 3.16.0-67.87~14.04.1	trusty
Affected	pkg:deb/ubuntu/linux-image-3.16.0-67-generic-lpae?distro=trusty	ubuntu	linux-image-3.16.0-67-generic-lpae	< 3.16.0-67.87~14.04.1	trusty

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date