Skip to content
OpenAdvisories
Unscored USN-2797-1 4 CVEs

linux-lts-utopic vulnerabilities

Published Nov 5, 2015 · Updated Feb 10, 2026

Summary

It was discovered that the Linux kernel did not check if a new IPv6 MTU set
by a user space application was valid. A remote attacker could forge a
route advertisement with an invalid MTU that a user space daemon like
NetworkManager would honor and apply to the kernel, causing a denial of
service. (CVE-2015-0272)

It was discovered that in certain situations, a directory could be renamed
outside of a bind mounted location. An attacker could use this to escape
bind mount containment and gain access to sensitive information.
(CVE-2015-2925)

Moein Ghasemzadeh discovered that the USB WhiteHEAT serial driver contained
hardcoded attributes about the USB devices. An attacker could construct a
fake WhiteHEAT USB device that, when inserted, causes a denial of service
(system crash). (CVE-2015-5257)

It was discovered that the SCTP protocol implementation in the Linux kernel
performed an incorrect sequence of protocol-initialization steps. A local
attacker could use this to cause a denial of service (system crash).
(CVE-2015-5283)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS linux-lts-utopic 3.16.0-52.71~14.04.1

Vulnerabilities 4

References

  • report
    https://ubuntu.com/security/CVE-2015-0272
  • report
    https://ubuntu.com/security/CVE-2015-2925
  • report
    https://ubuntu.com/security/CVE-2015-5257
  • report
    https://ubuntu.com/security/CVE-2015-5283