vulnerability

Ubuntu: (Multiple Advisories) (CVE-2015-3288): Linux kernel vulnerabilities

Severity
7
CVSS
(AV:L/AC:L/Au:N/C:C/I:C/A:C)
Published
Oct 16, 2016
Added
Nov 11, 2016
Modified
Apr 14, 2025

Description

It was discovered that the compression handling code in the Advanced Linux
Sound Architecture (ALSA) subsystem in the Linux kernel did not properly
check for an integer overflow. A local attacker could use this to cause a
denial of service (system crash). (CVE-2014-9904)

Kirill A. Shutemov discovered that memory manager in the Linux kernel did
not properly handle anonymous pages. A local attacker could use this to
cause a denial of service or possibly gain administrative privileges.
(CVE-2015-3288)

Vitaly Kuznetsov discovered that the Linux kernel did not properly suppress
hugetlbfs support in X86 paravirtualized guests. An attacker in the guest
OS could cause a denial of service (guest system crash). (CVE-2016-3961)

Ondrej Kozina discovered that the keyring interface in the Linux kernel
contained a buffer overflow when displaying timeout events via the
/proc/keys interface. A local attacker could use this to cause a denial of
service (system crash). (CVE-2016-7042)

Solution(s)

ubuntu-upgrade-linux-image-3-13-0-101-genericubuntu-upgrade-linux-image-3-13-0-101-generic-lpaeubuntu-upgrade-linux-image-3-13-0-101-lowlatencyubuntu-upgrade-linux-image-3-13-0-101-powerpc-e500ubuntu-upgrade-linux-image-3-13-0-101-powerpc-e500mcubuntu-upgrade-linux-image-3-13-0-101-powerpc-smpubuntu-upgrade-linux-image-3-13-0-101-powerpc64-embubuntu-upgrade-linux-image-3-13-0-101-powerpc64-smpubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-lts-trustyubuntu-upgrade-linux-image-generic-lts-trustyubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-powerpc-e500ubuntu-upgrade-linux-image-powerpc-e500mcubuntu-upgrade-linux-image-powerpc-smpubuntu-upgrade-linux-image-powerpc64-embubuntu-upgrade-linux-image-powerpc64-smpubuntu-upgrade-linux-image-virtual
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.