Ubuntu Security Notification for Linux-ti-omap4 Vulnerabilities (USN-3050-1)——漏洞银行丨0DAY BANK

It was discovered that the Linux netfilter implementation did not correctly perform validation when handling IPT_SO_SET_REPLACE events.

It was discovered that the Linux kernel did not properly suppress hugetlbfs support in X86 paravirtualized guests.

It was discovered that the keyring implementation in the Linux kernel did not ensure a data structure was initialized before referencing it after an error condition occurred.

An information leak in the netlink implementation of the Linux kernel.

A local unprivileged attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code with administrative privileges. (CVE-2016-3134)

An attacker in the guest OS could cause a denial of service (guest system crash). (CVE-2016-3961)

A local attacker could use this to cause a denial of service (system crash). (CVE-2016-4470)

A local attacker could use this to obtain sensitive information from kernel memory. (CVE-2016-5243)

Refer to Ubuntu advisory USN-3050-1 for affected packages and patching details, or update with your package manager.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

USN-3050-1: 12.04 (Precise) on src (linux-image-3.2.0-1485-omap4)