[USN-3167-2] Linux kernel (OMAP4) vulnerabilities

Severity High

CVEs 2

Several security issues were fixed in the kernel.

Dmitry Vyukov discovered that the KVM implementation in the Linux kernel
did not properly initialize the Code Segment (CS) in certain error cases. A
local attacker could use this to expose sensitive information (kernel
memory). (CVE-2016-9756)

Baozeng Ding discovered a race condition that could lead to a use-after-
free in the Advanced Linux Sound Architecture (ALSA) subsystem of the Linux
kernel. A local attacker could use this to cause a denial of service
(system crash). (CVE-2016-9794)

ID

USN-3167-2

Severity

high

Severity from

CVE-2016-9794

URL

https://ubuntu.com/security/notices/USN-3167-2

Published