A few hours ago, a vulnerability has been detected in the Linux kernel of the Ubuntu operating system, specifically its version 16.04 LTS that allowed unwanted users to run programs as administrator among other things.
The good news is that these vulnerabilities have been fixed almost immediately, taking just a few hours to correct the errors detected and releasing a patch that is capable of repairing them automatically.
In addition to the vulnerability that allowed to run programs with root user privileges, we have two other vulnerabilities that have been fixed. First of all, it was discovered that thanks to a failure in the ACC RAID controllers, an attacker could cause a general failure thanks to a DDos attack.
In second place, a vulnerability was detected in the TCP protocol, which allows an attacker to arbitrarily execute code, something he could use to cause a system crash.
Clearly good reaction from the Canonical team, since they have been able to correct the Ubuntu 16.04 LTS bug very quickly, almost in record time. It is very important that companies know how to correct errors as important as this one.
It is an important bug because it also affects the server version of Ubuntu 16, .04 LTS. Therefore, an attacker could exploit this vulnerability to bring down a server or steal important data, something that no major company can afford.
The patch se downloads automatically if we run the command apt-get update In our command console, a command that will update all the applications and utilities of the Ubuntu 16.04 LTS operating system.
If you would like to greater security for your serverI recommend the canonical livepatch service program, which is a special program for servers that will allow you to execute kernel updates without having to restart the server and therefore without leaving your clients without service. You can learn more about it through this link.