Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Ubuntu 18.04 LTS: 0059-1 Critical: Kernel Processor Issues

ubuntu
Calendar Grey November 12, 2019
Dist Ubuntu Esm H88
Kernel Live Patch Announcement 0060-1 provides information regarding improvements for AMD processor vulnerabilities in Fedora. Restart for essential resolutions.
On November 12, fixes for several high-severity Intel processor CVEs were released into the Ubuntu kernel, accompanied by a related processor microcode update

Summary

On November 12, fixes for several high-severity Intel processor CVEs were

released into the Ubuntu kernel, accompanied by a related processor microcode

update. Due to the high complexity of the fixes and the required microcode

update, we are unable to livepatch this set of CVEs. Please plan to reboot

into an updated kernel as soon as possible.

The details of these CVEs follows:

CVE-2018-12207

On an Ubuntu KVM host configured to use huge pages, a malicious KVM guest

can cause a host machine check exception (MCE) capable of bringing down

the host OS.

CVE-2019-0154

On Intel processors containing an i915 graphics processing unit, it is

possible from userspace to cause a GPU hang in certain low-power states by

reading a specific memory-mapped IO register.

CVE-2019-0155

On Intel processors containing an i915 graphics processing unit, it is

possible to use the GPU's blitter command streamer to write to

memory-mapped IO locations, which could be used for privi...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory threat kernel ubuntu high-severity microcode processor

Update Instructions

The problem can be corrected by installing an updated kernel with these
fixes and rebooting.

| Series           | Version               | Flavors                  |
|------------------+-----------------------+--------------------------|
| Ubuntu 18.04 LTS | 4.15.0-1054.55        | aws                      |
| Ubuntu 16.04 LTS | 4.4.0-1098.102        | aws                      |
| Ubuntu 18.04 LTS | 5.0.0-1025.27~18.04.1 | azure                    |
| Ubuntu 16.04 LTS | 4.15.0-1063.66        | azure                    |
| Ubuntu 18.04 LTS | 4.15.0-69.78          | generic lowlatency       |
| Ubuntu 16.04 LTS | 4.15.0-69.78~16.04.1  | generic lowlatency       |
| Ubuntu 14.04 LTS | 4.4.0-168.197~14.04.1 | generic lowlatency       |
| Ubuntu 18.04 LTS | 4.15.0-1063.72        | oem                      |
| Ubuntu 16.04 LTS | 4.4.0-168.197         | generic lowlatency       |

Support Information:

Kernels older than the levels listed above will no longer receive livepatch
updates.

References

CVE-2018-12207, CVE-2019-0154, CVE-2019-0155, CVE-2019-11135

--

ubuntu-security-announce mailing list

ubuntu-security-announce@lists.ubuntu.com

Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

Severity
critical
Lowest
Low
Medium
High
Critical

November 12, 2019

Topics%20covered

Topics Covered

security advisory threat kernel ubuntu high-severity microcode processor

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here