The first security issue (CVE-2016-10088) affecting Ubuntu 16.04 LTS was discovered in Linux kernel’s generic SCSI block layer, which incorrectly restricted write operations, allowing a local attacker to either gain root access or crash the vulnerable system by causing a denial of service. The second kernel vulnerability (CVE-2016-9191) was discovered by CAI Qian in Linux kernel’s sysctl implementation, which incorrectly performed reference counting, allowing an unprivileged attacker to cause a denial of service.