A local attacker could use this to construct a malicious ACPI table that, when loaded, caused a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-11472) It was discovered that a buffer overflow existed in the ACPI table parsing implementation in the Linux kernel. A local attacker could use this to expose sensitive information (kernel memory addresses). (CVE-2016-10208) It was discovered that an information disclosure vulnerability existed in the ACPI implementation of the Linux kernel. An attacker with physical access could use this to specially craft an ext4 image that causes a denial of service (system crash). Description Ralf Spenneberg discovered that the ext4 implementation in the Linux kernel did not properly validate meta block groups. Synopsis The remote Ubuntu host is missing one or more security-related patches. Severity display preferences can be toggled in the settings dropdown. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. The calculated severity for Plugins has been updated to use CVSS v3 by default.

Ubuntu 14.04 lts kernel