CVE-2017-2616 on Ubuntu 16.04 LTS (xenial) - medium.
Description:
A race condition was found in util-linux before 2.32.1 in the way su handled the management of child processes. A local authenticated attacker could use this flaw to kill other processes with root privileges under specific conditions.