[USN-3147-1] Linux kernel vulnerabilities

Severity High

CVEs 2

Several security issues were fixed in the kernel.

Andreas Gruenbacher and Jan Kara discovered that the filesystem
implementation in the Linux kernel did not clear the setgid bit during a
setxattr call. A local attacker could use this to possibly elevate group
privileges. (CVE-2016-7097)

Marco Grassi discovered that the driver for Areca RAID Controllers in the
Linux kernel did not properly validate control messages. A local attacker
could use this to cause a denial of service (system crash) or possibly gain
privileges. (CVE-2016-7425)

ID

USN-3147-1

Severity

high

Severity from

CVE-2016-7425

URL

https://ubuntu.com/security/notices/USN-3147-1

Published