USN-3207-2: Linux kernel (Trusty HWE) vulnerabilities
USN-3207-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 LTS. It was discovered that a use-after-free vulnerability existed in the block device layer of the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly gain administrative privileges. (CVE-2016-7910) Dmitry Vyukov discovered a use-after-free vulnerability in the sysioprioget() function in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly gain administrative privileges. (CVE-2016-7911) Andrey Konovalov discovered a use-after-free vulnerability in the DCCP implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly gain administrative privileges. (CVE-2017-6074)
Affected Software
Event History
Frequently Asked Questions
What vulnerabilities does USN-3207-2 fix?
USN-3207-2 fixes vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS.
Which version of Ubuntu is affected by USN-3207-2?
USN-3207-2 affects Ubuntu 12.04 LTS.
How can I fix USN-3207-2?
To fix USN-3207-2, update the Linux kernel to version 3.13.0.110.101 or later.
What is the severity of USN-3207-2?
The severity of USN-3207-2 is not specified.
Where can I find more information about USN-3207-2?
More information about USN-3207-2 can be found at the Ubuntu Security Notices website.