Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 494
Alerts This Week
Warning Icon 1 494

Debian 8: DLA-1529-1 Critical Security Advisory for Linux Kernel

debian lts
Calendar Grey October 4, 2018
Scroller Debian Lts
Debian's vital patches address various Linux kernel vulnerabilities, focusing on mitigating privilege escalation, denial-of-service (DoS), and sensitive data exposures.
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks
Topics%20covered

Topics Covered

security advisory denial of service critical debian privilege escalation linux kernel

Summary

CVE-2018-3620

Multiple researchers have discovered a vulnerability in the way

the Intel processor designs have implemented speculative execution

of instructions in combination with handling of page-faults. This

flaw could allow an attacker controlling an unprivileged process

to read memory from arbitrary (non-user controlled) addresses,

including from the kernel and all other processes running on the

system or cross guest/host boundaries to read host memory.

This issue covers only attackers running normal processes.
A related issue (CVE-2018-3646) exists with KVM guests,
and is not yet fixed.


CVE-2018-3639

Multiple researchers have discovered that Speculative Store Bypass

(SSB), a feature implemented in many processors, could be used to

read sensitive information from another context. In particular,

code in a software sandbox may be able to read sensitive

information from outside the sandbox. This issue is also known as

Read the Full Advisory


Severity
critical
Lowest
Low
Medium
High
Critical

Package: linux
Version: 3.16.59-1
CVE ID: CVE-2018-3620 CVE-2018-3639 CVE-2018-5391 CVE-2018-6554 CVE-2018-6555 CVE-2018-7755 CVE-2018-9363 CVE-2018-9516 CVE-2018-10021 CVE-2018-10323 CVE-2018-10876 CVE-2018-10877 CVE-2018-10878 CVE-2018-10879 CVE-2018-10880 CVE-2018-10881 CVE-2018-10882 CVE-2018-10883 CVE-2018-10902 CVE-2018-13093 CVE-2018-13094 CVE-2018-13405 CVE-2018-13406 CVE-2018-14609 CVE-2018-14617 CVE-2018-14633 CVE-2018-14634 CVE-2018-14678 CVE-2018-14734 CVE-2018-15572 CVE-2018-15594 CVE-2018-16276 CVE-2018-16658 CVE-2018-17182
Debian Bug: 898137

Topics%20covered

Topics Covered

security advisory denial of service critical debian privilege escalation linux kernel

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.