Linux kernel vulnerabilities

2015-12-04T00:00:00
ID USN-2829-1
Type ubuntu
Reporter Ubuntu
Modified 2015-12-04T00:00:00

Description

It was discovered that the SCTP protocol implementation in the Linux kernel performed an incorrect sequence of protocol-initialization steps. A local attacker could use this to cause a denial of service (system crash). (CVE-2015-5283)

Dmitry Vyukov discovered that the Linux kernel’s keyring handler attempted to garbage collect incompletely instantiated keys. A local unprivileged attacker could use this to cause a denial of service (system crash). (CVE-2015-7872)