Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 514
Alerts This Week
Warning Icon 1 514

Ubuntu 18.04 LTS: 0044-2 High: Linux Kernel Vulnerability Exploit

ubuntu
Calendar Grey December 8, 2017
Scroller Ubuntu
The latest kernel announcement highlights significant modifications in Ubuntu's Linux kernel, focusing on critical concerns and security loopholes.
Several security issues were fixed in the kernel.

Summary

Several security issues were fixed in the kernel.

Software Description:

- linux: Linux kernel

Details:

Mohamed Ghannam discovered that a use-after-free vulnerability existed in

the Netlink subsystem (XFRM) in the Linux kernel. A local attacker could

use this to cause a denial of service (system crash) or possibly execute

arbitrary code. (CVE-2017-16939)

It was discovered that the Linux kernel did not properly handle copy-on-

write of transparent huge pages. A local attacker could use this to cause a

denial of service (application crashes) or possibly gain administrative

privileges. (CVE-2017-1000405)

It was discovered that a race condition existed in the ALSA subsystem of

the Linux kernel when creating and deleting a port via ioctl(). A local

attacker could use this to cause a denial of service (system crash) or

possibly execute arbitrary code. (CVE-2017-15265)

Topics%20covered

Topics Covered

security advisory denial of service critical ubuntu linux kernel local attacker

Update Instructions

The problem can be corrected by updating your livepatches to the following
versions:

| Kernel          | Version  | flavors                  |
|-----------------+----------+--------------------------|
| 4.4.0-101.124   | 33.2     | generic, lowlatency      |
| 4.4.0-21.37     | 33.2     | generic, lowlatency      |
| 4.4.0-22.39     | 33.2     | generic, lowlatency      |
| 4.4.0-22.40     | 33.2     | generic, lowlatency      |
| 4.4.0-24.43     | 33.2     | generic, lowlatency      |
| 4.4.0-28.47     | 33.2     | generic, lowlatency      |
| 4.4.0-31.50     | 33.2     | generic, lowlatency      |
| 4.4.0-34.53     | 33.2     | generic, lowlatency      |
| 4.4.0-36.55     | 33.2     | generic, lowlatency      |
| 4.4.0-38.57     | 33.2     | generic, lowlatency      |
| 4.4.0-42.62     | 33.2     | generic, lowlatency      |
| 4.4.0-43.63     | 33.2     | generic, lowlatency      |
| 4.4.0-45.66     | 33.2     | generic, lowlatency      |
| 4.4.0-47.68     | 33.2     | generic, lowlatency      |
| 4.4.0-51.72     | 33.2     | generic, lowlatency      |
| 4.4.0-53.74     | 33.2     | generic, lowlatency      |
| 4.4.0-57.78     | 33.2     | generic, lowlatency      |
| 4.4.0-59.80     | 33.2     | generic, lowlatency      |
| 4.4.0-62.83     | 33.2     | generic, lowlatency      |
| 4.4.0-63.84     | 33.2     | generic, lowlatency      |
| 4.4.0-64.85     | 33.2     | generic, lowlatency      |
| 4.4.0-66.87     | 33.2     | generic, lowlatency      |
| 4.4.0-67.88     | 33.2     | generic, lowlatency      |
| 4.4.0-70.91     | 33.2     | generic, lowlatency      |
| 4.4.0-71.92     | 33.2     | generic, lowlatency      |
| 4.4.0-72.93     | 33.2     | generic, lowlatency      |
| 4.4.0-75.96     | 33.2     | generic, lowlatency      |
| 4.4.0-77.98     | 33.2     | generic, lowlatency      |
| 4.4.0-78.99     | 33.2     | generic, lowlatency      |
| 4.4.0-79.100    | 33.2     | generic, lowlatency      |
| 4.4.0-81.104    | 33.2     | generic, lowlatency      |
| 4.4.0-83.106    | 33.2     | generic, lowlatency      |
| 4.4.0-87.110    | 33.2     | generic, lowlatency      |
| 4.4.0-89.112    | 33.2     | generic, lowlatency      |
| 4.4.0-91.114    | 33.2     | generic, lowlatency      |
| 4.4.0-92.115    | 33.2     | generic, lowlatency      |
| 4.4.0-93.116    | 33.2     | generic, lowlatency      |
| 4.4.0-96.119    | 33.2     | generic, lowlatency      |
| 4.4.0-97.120    | 32.2     | generic, lowlatency      |
| 4.4.0-97.120    | 33.2     | generic, lowlatency      |
| 4.4.0-98.121    | 33.2     | generic, lowlatency      |
| lts-4.4.0-101.124_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-21.37_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-22.39_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-22.40_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-24.43_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-28.47_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-31.50_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-34.53_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-36.55_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-38.57_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-42.62_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-45.66_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-47.68_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-51.72_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-53.74_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-57.78_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-59.80_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-62.83_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-63.84_14.04.2-lts-xenial | 14.04.2  | generic, lowlatency      |
| lts-4.4.0-64.85_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-66.87_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-67.88_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-70.91_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-71.92_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-72.93_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-75.96_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-78.99_14.04.2-lts-xenial | 14.04.2  | generic, lowlatency      |
| lts-4.4.0-79.100_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-81.104_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-83.106_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-87.110_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-89.112_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-91.114_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-92.115_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-93.116_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-96.119_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-97.120_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |
| lts-4.4.0-98.121_14.04.1-lts-xenial | 14.04.1  | generic, lowlatency      |

Additionally, you should install an updated kernel with these fixes and
reboot at your convienience.

References

CVE-2017-1000405, CVE-2017-15265, CVE-2017-16939

--

ubuntu-security-announce mailing list

ubuntu-security-announce@lists.ubuntu.com

Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

December 07, 2017

Topics%20covered

Topics Covered

security advisory denial of service critical ubuntu linux kernel local attacker

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.