Ubuntu update for Linux kernel
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 2 |
| CVE-ID | CVE-2016-7425 CVE-2016-8658 |
| CWE-ID | CWE-805 CWE-121 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software |
Ubuntu Operating systems & Components / Operating system |
| Vendor | Canonical Ltd. |
Security Bulletin
This security bulletin contains information about 2 vulnerabilities.
1) Privilege escalation
EUVDB-ID: #VU1009
Risk: Low
CVSSv4.0: 4.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2016-7425
CWE-ID:
CWE-805 - Buffer Access with Incorrect Length Value
Exploit availability: No
DescriptionThe vulnerability allows a local user to gain elevated privileges on the target system.
The weakness is due to insufficient restriction of length field by arcmsr_iop_message_xfer function in drivers/scsi/arcmsr/arcmsr_hba.c. By sending an ARCMSR_MESSAGE_WRITE_WQBUFFER control code, attackers can gain elevated privileges and trigger a heap-based buffer overflow.
Success fule exploitation of the vulnerability may result in denial of service on the vulnerable system.
Update the affected packages
Ubuntu: 14.04
CPE2.3 External linkshttps://www.ubuntu.com/usn/usn-3145-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Denial of service
EUVDB-ID: #VU1008
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2016-8658
CWE-ID:
CWE-121 - Stack-based buffer overflow
Exploit availability: No
DescriptionThe vulnerability allows a local user to cause DoS conditions on the target system.
The weakness exists due to stack-based buffer overfow in the brcmf_cfg80211_start_ap function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c. By using a long SSID Information Element in a command to a Netlink socket, attackers can trigger a system crash.
Successful exploitation of the vulnerability may result in denial of service and further attacks on the vulnerable system.
Update the affected packages
Ubuntu: 14.04
CPE2.3https://www.ubuntu.com/usn/usn-3145-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
