[USN-3443-1] Linux kernel vulnerabilities

Severity Medium

CVEs 2

Several security issues were fixed in the Linux kernel.

It was discovered that on the PowerPC architecture, the kernel did not
properly sanitize the signal stack when handling sigreturn(). A local
attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2017-1000255)

Andrey Konovalov discovered that a divide-by-zero error existed in the TCP
stack implementation in the Linux kernel. A local attacker could use this
to cause a denial of service (system crash). (CVE-2017-14106)

ID

USN-3443-1

Severity

medium

Severity from

CVE-2017-1000255

URL

https://ubuntu.com/security/notices/USN-3443-1

Published