Secunia

Description

Ubuntu has issued an update for the kernel. This fixes some vulnerabilities, which can be exploited by malicious, local users to cause a DoS (Denial of Service), bypass certain security restrictions, disclose potentially sensitive information, and gain escalated privileges, and malicious people to cause a DoS and potentially compromise a vulnerable system.

For more information:
SA23073
SA30044
SA30241
SA30580
SA30719

1) A race condition error in the "ptrace()" implementation can be exploited to crash the kernel.

2) A vulnerability is caused due to missing feature length validation within the "dccp_feat_change()" function in net/dccp/feat.c, which can be exploited to cause an overflow and execute arbitrary code with kernel privileges.

3) An unspecified error in the 32-bit and 64-bit emulation can be exploited to disclose potentially sensitive data via a specially crafted binary.

Solution
Apply updated packages.
Further details available in Customer Area

Original Advisory
http://www.ubuntu.com/usn/usn-625-1

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area