USN-3129-1: Linux kernel vulnerability
Ondrej Kozina discovered that the keyring interface in the Linux kernel contained a buffer overflow when displaying timeout events via the /proc/keys interface. A local attacker could use this to cause a denial of service (system crash).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-powerpc-smpto a version that resolves this vulnerability.Fixed in 4.8.0.27.36 - Upgrade
Upgrade
ubuntu/linux-image-powerpc-e500mcto a version that resolves this vulnerability.Fixed in 4.8.0.27.36 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-27-lowlatencyto a version that resolves this vulnerability.Fixed in 4.8.0-27.29 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.8.0.27.36 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-27-genericto a version that resolves this vulnerability.Fixed in 4.8.0-27.29 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-27-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.8.0-27.29 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-27-powerpc64-embto a version that resolves this vulnerability.Fixed in 4.8.0-27.29 - Upgrade
Upgrade
ubuntu/linux-image-powerpc64-smpto a version that resolves this vulnerability.Fixed in 4.8.0.27.36 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 4.8.0.27.36 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-27-powerpc-e500mcto a version that resolves this vulnerability.Fixed in 4.8.0-27.29 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 4.8.0.27.36 - Upgrade
Upgrade
ubuntu/linux-image-powerpc64-embto a version that resolves this vulnerability.Fixed in 4.8.0.27.36 - Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 4.8.0.27.36 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-27-powerpc-smpto a version that resolves this vulnerability.Fixed in 4.8.0-27.29
Event History
Frequently Asked Questions
What is the vulnerability ID for this Linux kernel vulnerability?
The vulnerability ID for this Linux kernel vulnerability is USN-3129-1.
What is the severity of USN-3129-1?
The severity of USN-3129-1 is not mentioned in the provided information.
How does this vulnerability affect Ubuntu 16.10?
This vulnerability affects Ubuntu 16.10 and the affected software packages are listed in the provided information.
What is the remedy for USN-3129-1?
The remedy for USN-3129-1 is to update the affected Linux kernel packages to the specified versions.
Where can I find more information about USN-3129-1?
You can find more information about USN-3129-1 on the Ubuntu security notices page provided in the references.