USN-3129-2: Linux kernel (Raspberry Pi 2) vulnerabilities

Reference Links

• https://ubuntu.com/security/CVE-2016-7042
• https://ubuntu.com/security/notices/USN-3127-1
• https://ubuntu.com/security/notices/USN-3127-2
• https://ubuntu.com/security/notices/USN-3126-1
• https://ubuntu.com/security/notices/USN-3126-2
• https://ubuntu.com/security/notices/USN-3161-3
• https://ubuntu.com/security/notices/USN-3129-1
• https://ubuntu.com/security/notices/USN-3128-1
• https://ubuntu.com/security/notices/USN-3128-3
• https://ubuntu.com/security/notices/USN-3128-2
• https://launchpad.net/ubuntu/+source/linux-raspi2/4.8.0-1018.21
• https://ubuntu.com/security/notices/USN-3129-2 (Advisory)

Child vulnerabilities

(Contains the following vulnerabilities)

• CVE-2016-7042

Frequently Asked Questions

• What is the vulnerability ID for this Linux kernel vulnerability?

  The vulnerability ID for this Linux kernel vulnerability is CVE-2016-7042.

• What is the severity level of the Linux kernel vulnerability?

  The severity level of the Linux kernel vulnerability is not mentioned in the provided information.

• What is the affected software for this Linux kernel vulnerability?

  The affected software for this Linux kernel vulnerability is Ubuntu 16.10 with Linux kernel version 4.8.0-1018-raspi2 or 4.8.0.1018.21.

• How can a local attacker exploit this vulnerability?

  A local attacker can exploit this vulnerability by causing a denial of service (system crash) through the buffer overflow in the keyring interface when displaying timeout events via the /proc/keys interface.

• How can I fix this Linux kernel vulnerability?

  To fix this Linux kernel vulnerability, update the Linux kernel to version 4.8.0-1018.21 or higher.