USN-2843-3: Linux kernel (Raspberry Pi 2) vulnerabilities

Ubuntu Security Notice USN-2843-3

17th December, 2015

linux-raspi2 vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 15.10

Summary

Several security issues were fixed in the kernel.

Software description

• linux-raspi2
  - Linux kernel for Raspberry Pi 2
  
  

Details

郭永刚 discovered that the ppp implementation in the Linux kernel did
not ensure that certain slot numbers are valid. A local attacker with the
privilege to call ioctl() on /dev/ppp could cause a denial of service
(system crash). ()

It was discovered that the virtual video osd test driver in the Linux
kernel did not properly initialize data structures. A local attacker could
use this to obtain sensitive information from the kernel. ()

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 15.10:

To update your system, please follow these instructions:
,

,

CVE-2015-7885