CVE-2015-5228 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and take ownership of existing files via unspecified vectors related to a directory path.