Skip to content
OpenAdvisories
Critical USN-2843-2 5 CVEs

linux-lts-wily vulnerabilities

Published Dec 17, 2015 · Updated Sep 7, 2026

Summary

Jan Beulich discovered that the KVM svm hypervisor implementation in the
Linux kernel did not properly catch Debug exceptions on AMD processors. An
attacker in a guest virtual machine could use this to cause a denial of
service (system crash) in the host OS. (CVE-2015-8104)

郭永刚 discovered that the ppp implementation in the Linux kernel did
not ensure that certain slot numbers are valid. A local attacker with the
privilege to call ioctl() on /dev/ppp could cause a denial of service
(system crash). (CVE-2015-7799)

Dmitry Vyukov discovered that the Linux kernel's keyring handler attempted
to garbage collect incompletely instantiated keys. A local unprivileged
attacker could use this to cause a denial of service (system crash).
(CVE-2015-7872)

It was discovered that the virtual video osd test driver in the Linux
kernel did not properly initialize data structures. A local attacker could
use this to obtain sensitive information from the kernel. (CVE-2015-7884)

It was discovered that the driver for Digi Neo and ClassicBoard devices did
not properly initialize data structures. A local attacker could use this to
obtain sensitive information from the kernel. (CVE-2015-7885)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS linux-lts-wily 4.2.0-21.25~14.04.1

Vulnerabilities 5

References

  • report
    https://ubuntu.com/security/CVE-2015-7799
  • report
    https://ubuntu.com/security/CVE-2015-7872
  • report
    https://ubuntu.com/security/CVE-2015-7884
  • report
    https://ubuntu.com/security/CVE-2015-7885
  • report
    https://ubuntu.com/security/CVE-2015-8104