Product update: Virtuozzo 7.0 Update 9 (7.0.9-534)

The Update 9 for Virtuozzo 7.0 provides new features as well as security, stability, and usability bug fixes.
Vulnerability id: CVE-2018-14634, PSBM-88914
An integer overflow flaw was found in create_elf_tables(). An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system.

Vulnerability id: CVE-2018-18559, PSBM-89677
It was discovered that a race condition between packet_do_bind() and packet_notifier() in the implementation of AF_PACKET could lead to use-after-free. An unprivileged user on the host or in a container could exploit this to crash the kernel or, potentially, to escalate their privileges in the system.

Vulnerability id: CVE-2018-14646, PSBM-90076
The Linux kernel was found to be vulnerable to a NULL pointer dereference bug in the __netlink_ns_capable() function in the net/netlink/af_netlink.c file. A local attacker could exploit this when a net namespace with a netnsid is assigned to cause a kernel panic and a denial of service.