Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 554
Alerts This Week
Warning Icon 1 554

Ubuntu 16.04 LTS LSN-0024-1 Critical: Linux Kernel Buffer Overflow

ubuntu
Calendar Grey June 21, 2017
Dist Ubuntu Esm H88
Upgrade your Ubuntu kernel to address critical vulnerabilities and mitigate potential unauthorized access threats.
Several security issues were fixed in the kernel.

Summary

Several security issues were fixed in the kernel.

Software Description:

- linux: Linux kernel

Details:

It was discovered that the stack guard page for processes in the Linux

kernel was not sufficiently large enough to prevent overlapping with the

heap. An attacker could leverage this with another vulnerability to execute

arbitrary code and gain administrative privileges (CVE-2017-1000364)

Topics%20covered

Topics Covered

security advisory buffer overflow critical threat Linux kernel administrative access Linux patch Ubuntu 16.04

Update Instructions

The problem can be corrected by updating your livepatches to the following
versions:

| Kernel          | Version  | flavors                  |
|-----------------+----------+--------------------------|
| 4.4.0-21.37     | 24.2     | generic, lowlatency      |
| 4.4.0-22.39     | 24.2     | generic, lowlatency      |
| 4.4.0-22.40     | 24.2     | generic, lowlatency      |
| 4.4.0-24.43     | 24.2     | generic, lowlatency      |
| 4.4.0-28.47     | 24.2     | generic, lowlatency      |
| 4.4.0-31.50     | 24.2     | generic, lowlatency      |
| 4.4.0-34.53     | 24.2     | generic, lowlatency      |
| 4.4.0-36.55     | 24.2     | generic, lowlatency      |
| 4.4.0-38.57     | 24.2     | generic, lowlatency      |
| 4.4.0-42.62     | 24.2     | generic, lowlatency      |
| 4.4.0-43.63     | 24.2     | generic, lowlatency      |
| 4.4.0-45.66     | 24.2     | generic, lowlatency      |
| 4.4.0-47.68     | 24.2     | generic, lowlatency      |
| 4.4.0-51.72     | 24.2     | generic, lowlatency      |
| 4.4.0-53.74     | 24.2     | generic, lowlatency      |
| 4.4.0-57.78     | 24.2     | generic, lowlatency      |
| 4.4.0-59.80     | 24.2     | generic, lowlatency      |
| 4.4.0-62.83     | 24.2     | generic, lowlatency      |
| 4.4.0-63.84     | 24.2     | generic, lowlatency      |
| 4.4.0-64.85     | 24.2     | generic, lowlatency      |
| 4.4.0-66.87     | 24.2     | generic, lowlatency      |
| 4.4.0-67.88     | 24.2     | generic, lowlatency      |
| 4.4.0-70.91     | 24.2     | generic, lowlatency      |
| 4.4.0-71.92     | 24.2     | generic, lowlatency      |
| 4.4.0-72.93     | 24.2     | generic, lowlatency      |
| 4.4.0-75.96     | 24.2     | generic, lowlatency      |
| 4.4.0-77.98     | 24.2     | generic, lowlatency      |
| 4.4.0-78.99     | 24.2     | generic, lowlatency      |
| 4.4.0-79.100    | 24.2     | generic, lowlatency      |
| lts-4.4.0-21.37_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-22.39_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-22.40_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-24.43_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-28.47_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-31.50_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-34.53_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-36.55_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-38.57_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-42.62_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-45.66_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-47.68_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-51.72_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-53.74_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-57.78_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-59.80_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-62.83_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-63.84_14.04.2-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-64.85_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-66.87_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-70.91_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |
| lts-4.4.0-71.92_14.04.1-lts-xenial | 24.2 | generic, lowlatency      |

Additionally, you should install an updated kernel with these fixes and
reboot at your convienience.

References

CVE-2017-1000364

--

ubuntu-security-announce mailing list

ubuntu-security-announce@lists.ubuntu.com

Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

Severity
critical
Lowest
Low
Medium
High
Critical

June 21, 2017

Topics%20covered

Topics Covered

security advisory buffer overflow critical threat Linux kernel administrative access Linux patch Ubuntu 16.04

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.