Stay Secure with the Latest Linux Advisories

security advisoryUbuntukernel

Ubuntu 20.04 LTS: 0084-1 Critical: Kernel Integer Underflow Issue

A security issue was fixed in the kernel.. Linux kernel vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS Summary A security issue was fixed in the kernel. Software Description - linux - Linux kernel - linux-aws - Linux kernel for Amazon Web Services (AWS) systems - linux-azure - Linux kernel for Microsoft Azure Cloud systems - linux-gcp - Linux kernel for Google Cloud Platform (GCP) systems - linux-gke - Linux kernel for Google Container Engine (GKE) systems - linux-gkeop - Linux kernel for Google Container Engine (GKE) systems - linux-ibm - Linux kernel for IBM cloud systems Details William Liu and Jamie Hill-Daniel discovered that the file system context functionality in the Linux kernel contained an integer underflow vulnerability, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2022-0185) Update instructions The problem can be corrected by updating your kernel livepatch to the following versions: Ubuntu 20.04 LTS aws - 84.1 aws - 84.2 azure - 84.1 gcp - 84.1 generic - 84.1 gke - 84.1 gkeop - 84.1 ibm - 84.1 lowlatency - 84.1 Ubuntu 18.04 LTS generic - 84.1 generic - 84.2 gke - 84.1 gkeop - 84.1 ibm - 84.1 lowlatency - 84.1 lowlatency - 84.2 Support Information Kernels older than the levels listed below do not receive livepatch updates. If you are running a kernel version earlier than the one listed below, please upgrade your kernel as soon as possible. Ubuntu 20.04 LTS linux-aws - 5.4.0-1009 linux-aws - 5.4.0-1061 linux-azure - 5.4.0-1010 linux-gcp - 5.4.0-1009 linux-gke - 5.4.0-1033 linux-gkeop - 5.4.0-1009 linux-ibm - 5.4.0-1009 linux-oem - 5.4.0-26 linux - 5.4.0-26 Ubuntu 18.04 LTS linux-aws - 4.15.0-1054 linux-azure-4.15 - 4.15.0-1115 linux-gke-4.15 - 4.15.0-1076 linux-gke-5.4 -5.4.0-1009 linux-gkeop-5.4 - 5.4.0-1007 linux-hwe-5.4 - 5.4.0-26 linux-ibm-5.4 - 5.4.0-1009 linux-oem - 4.15.0-1063 linux - 4.15.0-69 Ubuntu 16.04 ESM linux-aws - 4.4.0-1098 linux-aws - 4.4.0-1129 linux-azure - 4.15.0-1063 linux-azure - 4.15.0-1078 linux-azure - 4.15.0-1114 linux-hwe - 4.15.0-143 linux-hwe - 4.15.0-69 linux - 4.4.0-168 linux - 4.4.0-211 Ubuntu 14.04 ESM linux-lts-xenial - 4.4.0-168 References - CVE-2022-0185 -- ubuntu-security-announce mailing list This email address is being protected from spambots. You need JavaScript enabled to view it. Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce . Kernel security issues fixed in Ubuntu 20.04 and 18.04 due to integer underflow. Important to update for protection.. Ubuntu Update, Linux Kernel Issue, Integer Underflow, Authentication Bypass. . Severity: Critical. LinuxSecurity.com Team

Jan 20, 2022 •Critical Ubuntu