USN-3221-1: Linux kernel vulnerability

Ubuntu Security Notice USN-3221-1

7th March, 2017

linux, linux-raspi2 vulnerability

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 16.10

Summary

The system could be made to crash or run programs as an administrator.

Software description

• linux
  - Linux kernel
  
  





• linux-raspi2
  - Linux kernel for Raspberry Pi 2
  
  

Details

Alexander Popov discovered that the N_HDLC line discipline implementation
in the Linux kernel contained a double-free vulnerability. A local attacker
could use this to cause a denial of service (system crash) or possibly gain
administrative privileges.

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 16.10:

linux-image-powerpc-smp 4.8.0.41.52

linux-image-powerpc-e500mc 4.8.0.41.52

linux-image-generic 4.8.0.41.52

linux-image-generic-lpae 4.8.0.41.52

linux-image-powerpc64-emb 4.8.0.41.52

linux-image-lowlatency 4.8.0.41.52

linux-image-raspi2 4.8.0.1028.31

To update your system, please follow these instructions: