[USN-3219-2] Linux kernel (Trusty HWE) vulnerability

Severity High

CVEs 1

The system could be made to crash or run programs as an administrator.

USN-3219-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04
LTS. This update provides the corresponding updates for the Linux
Hardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu
12.04 LTS.

Alexander Popov discovered that the N_HDLC line discipline implementation
in the Linux kernel contained a double-free vulnerability. A local attacker
could use this to cause a denial of service (system crash) or possibly gain
administrative privileges.

ID

USN-3219-2

Severity

high

Severity from

CVE-2017-2636

URL

https://ubuntu.com/security/notices/USN-3219-2

Published