[USN-3187-2] Linux kernel (OMAP4) vulnerabilities

Severity Critical

CVEs 2

Several security issues were fixed in the kernel.

Andrey Konovalov discovered that the SCTP implementation in the Linux
kernel improperly handled validation of incoming data. A remote attacker
could use this to cause a denial of service (system crash). (CVE-2016-9555)

It was discovered that multiple memory leaks existed in the XFS
implementation in the Linux kernel. A local attacker could use this to
cause a denial of service (memory consumption). (CVE-2016-9685)

ID

USN-3187-2

Severity

critical

Severity from

CVE-2016-9555

URL

https://ubuntu.com/security/notices/USN-3187-2

Published