Post Syndicated from corbet original http://lwn.net/Articles/692697/rss
The just-released 4.6.3, 4.4.14, and 3.14.73 stable kernels contain a set
of netfilter fixes that, it has just been disclosed, fix a couple of severe
local privilege-escalation vulnerabilities. Anybody who is running a site
with user and network namespaces enabled will want to update their kernels
in short order. The fixes were originally committed into 4.6-rc2 in April
with no comment regarding their implications.