---

Canonical Patches 4 Linux Kernel Vulnerabilities in All Supported Ubuntu OSes

These days, Canonical only releases security fixes as a pack, for all Ubuntu releases, and the first one for the new year isn’t even all that big. There are two security issues affecting Ubuntu 16.10 (Yakkety Yak) and Ubuntu 12.04 LTS (Precise Pangolin), three flaws affecting Ubuntu 16.04 LTS (Xenial Xerus), and four affecting Ubuntu 14.04 LTS (Trusty Tahr). The first vulnerability affected all releases and was discovered by Dmitry Vyukov in Linux kernel’s KVM implementation, which couldn’t properly initialize the Code Segment (CS) in certain error cases, allowing a local attacker to expose sensitive information from kernel memory. The issue is documented as CVE-2016-9756 for more information, as it affects other Linux distributions.

Get the Free Newsletter!

Subscribe to Developer Insider for top news, trends, & analysis