USN-2842-1: Linux kernel vulnerabilities

Ubuntu Security Notice USN-2842-1

17th December, 2015

linux vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 15.04

Summary

Several security issues were fixed in the kernel.

Software description

• linux
  - Linux kernel
  
  

Details

Jan Beulich discovered that the KVM svm hypervisor implementation in the
Linux kernel did not properly catch Debug exceptions on AMD processors. An
attacker in a guest virtual machine could use this to cause a denial of
service (system crash) in the host OS. ()

It was discovered that the virtual video osd test driver in the Linux
kernel did not properly initialize data structures. A local attacker could
use this to obtain sensitive information from the kernel. ()

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 15.04:

To update your system, please follow these instructions:
,

,

CVE-2015-8104