Ubuntu USN-2829-2: Linux Kernel Security Update for CVE-2015-5283/7872

Critical Vulnerability Information Vulnerability ID: USN-2829-2 Affected: Linux kernel (Vivid HWE) Release Date: December 4, 2015 Ubuntu Version: 14.04 LTS Vulnerability Details 1. Incorrect SCTP Protocol Implementation: - Description: The SCTP protocol implementation in the Linux kernel performs an incorrect sequence of protocol initialization steps, allowing a local attacker to exploit this issue to cause a denial of service (system crash). - CVE ID: CVE-2015-5283 2. Linux Kernel Keyring Handling Issue: - Description: Dmitry Vyukov discovered that the Linux kernel's keyring handler attempts garbage collection on keys that are not fully instantiated. An unauthorized local user can exploit this issue to cause a denial of service (system crash). - CVE ID: CVE-2015-7872 Update Notes Reboot Required: After updating, the system must be restarted to apply all changes. ABI Change Notice: Due to unavoidable ABI changes, the kernel update has been assigned a new version number, requiring recompilation and reinstallation of all third-party kernel modules. Affected Package Versions Ubuntu 14.04 LTS trusty: - linux-image-3.19.0-39-generic - 3.19.0-39.44~14.04.1 - linux-image-3.19.0-39-generic-lpae - 3.19.0-39.44~14.04.1 - linux-image-3.19.0-39-lowlatency - 3.19.0-39.44~14.04.1 - linux-image-3.19.0-39-powerpc-e500mc - 3.19.0-39.44~14.04.1 - linux-image-3.19.0-39-powerpc-smp - 3.19.0-39.44~14.04.1 - linux-image-3.19.0-39-powerpc64-emb - 3.19.0-39.44~14.04.1 - linux-image-3.19.0-39-powerpc64-smp - 3.19.0-39.44~14.04.1 References CVE IDs: - CVE-2015-7872 - CVE-2015-5283

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu USN-2829-2: Linux Kernel Security Update for CVE-2015-5283/7872