USN-2685-1: Linux kernel vulnerabilities
A flaw was discovered in the kvm (kernel virtual machine) subsystem's kvmapichasevents function. A unprivileged local user could exploit this flaw to cause a denial of service (system crash). (CVE-2015-4692) A flaw was discovered in how the Linux kernel handles invalid UDP checksums. A remote attacker could exploit this flaw to cause a denial of service using a flood of UDP packets with invalid checksums. (CVE-2015-5364) A flaw was discovered in how the Linux kernel handles invalid UDP checksums. A remote attacker can cause a denial of service against applications that use epoll by injecting a single packet with an invalid checksum. (CVE-2015-5366)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-2685-1?
The vulnerability USN-2685-1 has a severity rating that allows unprivileged local users to execute denial of service attacks.
How do I fix USN-2685-1?
To fix USN-2685-1, update to the latest kernel version, specifically linux-image-3.16.0-44.59 on Ubuntu 14.10.
What are the affected systems for USN-2685-1?
The affected systems for USN-2685-1 include Ubuntu 14.10 running specific linux-image packages up to version 3.16.0-44.59.
Who is affected by USN-2685-1?
Unprivileged local users on Ubuntu 14.10 may be affected by USN-2685-1 as they can potentially exploit the vulnerability.
What type of vulnerability is described in USN-2685-1?
USN-2685-1 describes a denial of service vulnerability in the kvm subsystem of the Linux kernel.