Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -2 articles for you...
172
security advisorydenial of serviceupdateUbuntu 18.04 LTS: USN-5600-1 Critical Linux Kernel HWE Flaws
Several security issues were fixed in the Linux kernel.. =========================================================================Ubuntu Security Notice USN-5600-1 September 05, 2022 linux-hwe-5.4 vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-hwe-5.4: Linux hardware enablement (HWE) kernel Details: Asaf Modelevsky discovered that the Intel(R) 10GbE PCI Express (ixgbe) Ethernet driver for the Linux kernel performed insufficient control flow management. A local attacker could possibly use this to cause a denial of service. (CVE-2021-33061) It was discovered that the virtual terminal driver in the Linux kernel did not properly handle VGA console font changes, leading to an out-of-bounds write. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33656) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS: linux-image-5.4.0-125-generic 5.4.0-125.141~18.04.1 linux-image-5.4.0-125-generic-lpae 5.4.0-125.141~18.04.1 linux-image-5.4.0-125-lowlatency 5.4.0-125.141~18.04.1 linux-image-generic-hwe-18.04 5.4.0.125.141~18.04.105 linux-image-generic-lpae-hwe-18.04 5.4.0.125.141~18.04.105 linux-image-lowlatency-hwe-18.04 5.4.0.125.141~18.04.105 linux-image-oem 5.4.0.125.141~18.04.105 linux-image-oem-osp1 5.4.0.125.141~18.04.105 linux-image-snapdragon-hwe-18.04 5.4.0.125.141~18.04.105 linux-image-virtual-hwe-18.04 5.4.0.125.141~18.04.105 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new versionnumber, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-5600-1 CVE-2021-33061, CVE-2021-33656 Package Information: https://launchpad.net/ubuntu/+source/linux-hwe-5.4/5.4.0-125.141~18.04.1 . A variety of security flaws have been addressed in the Linux operating system for Ubuntu 18.04 LTS, necessitating important patches.. Linux Kernel Update, Ubuntu 18.04 Security, Kernel Flaw Fixes. . Severity: Critical. LinuxSecurity.com Team
Sep 05, 2022
•Critical
Ubuntu
172
security advisorydenial of servicesecurity issueUbuntu 12.04 ESM: USN-3798-2 Moderate: Linux Kernel Denial Of Service
Several security issues were fixed in the Linux kernel.. =========================================================================Ubuntu Security Notice USN-3798-2 October 23, 2018 linux-lts-trusty vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 ESM Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-lts-trusty: Linux hardware enablement kernel from Trusty for Precise ESM Details: USN-3798-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 LTS. Dmitry Vyukov discovered that the key management subsystem in the Linux kernel did not properly restrict adding a key that already exists but is negatively instantiated. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2015-8539) It was discovered that a use-after-free vulnerability existed in the device driver for XCeive xc2028/xc3028 tuners in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2016-7913) Pengfei Ding (???), Chenfu Bao (???), and Lenx Wei (??) discovered a race condition in the generic SCSI driver (sg) of the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-0794) Eric Biggers discovered that the key management subsystem in the Linux kernel did not properly restrict adding a key that already exists but is uninstantiated. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-15299) It was discovered that a NULL pointer dereference could be triggered in the OCFS2 file systemimplementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-18216) Luo Quan and Wei Yang discovered that a race condition existed in the Advanced Linux Sound Architecture (ALSA) subsystem of the Linux kernel when handling ioctl()s. A local attacker could use this to cause a denial of service (system deadlock). (CVE-2018-1000004) ??? discovered that a race condition existed in the Advanced Linux Sound Architecture (ALSA) subsystem of the Linux kernel that could lead to a use- after-free or an out-of-bounds buffer access. A local attacker with access to /dev/snd/seq could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-7566) It was discovered that a buffer overflow existed in the NFC Logical Link Control Protocol (llcp) implementation in the Linux kernel. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-9518) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 ESM: linux-image-3.13.0-161-generic 3.13.0-161.211~precise1 linux-image-3.13.0-161-generic-lpae 3.13.0-161.211~precise1 linux-image-generic-lpae-lts-trusty 3.13.0.161.151 linux-image-generic-lts-trusty 3.13.0.161.151 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-3798-2 https://ubuntu.com/security/notices/USN-3798-1 CVE-2015-8539,CVE-2016-7913, CVE-2017-0794, CVE-2017-15299, CVE-2017-18216, CVE-2018-1000004, CVE-2018-7566, CVE-2018-9518 . Vulnerabilities within the Linux kernel have been addressed in the update for Ubuntu's Trusty HWE, boosting overall system reliability.. kernel updates, ubuntu security, system stability, denial of service, security fixes. . LinuxSecurity.com Team
Oct 23, 2018
Ubuntu
172
security advisorydenial of servicekernel updateUbuntu 16.04 LTS USN-3508-2 Moderate: Linux Kernel HWE Threats
Several security issues were fixed in the Linux kernel.. =========================================================================Ubuntu Security Notice USN-3508-2 December 07, 2017 linux-hwe vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-hwe: Linux hardware enablement (HWE) kernel Details: USN-3508-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.04 for Ubuntu 16.04 LTS. Mohamed Ghannam discovered that a use-after-free vulnerability existed in the Netlink subsystem (XFRM) in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-16939) It was discovered that the Linux kernel did not properly handle copy-on- write of transparent huge pages. A local attacker could use this to cause a denial of service (application crashes) or possibly gain administrative privileges. (CVE-2017-1000405) Yonggang Guo discovered that a race condition existed in the driver subsystem in the Linux kernel. A local attacker could use this to possibly gain administrative privileges. (CVE-2017-12146) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS: linux-image-4.10.0-42-generic 4.10.0-42.46~16.04.1 linux-image-4.10.0-42-generic-lpae 4.10.0-42.46~16.04.1 linux-image-4.10.0-42-lowlatency 4.10.0-42.46~16.04.1 linux-image-generic-hwe-16.04 4.10.0.42.44 linux-image-generic-lpae-hwe-16.04 4.10.0.42.44 linux-image-lowlatency-hwe-16.04 4.10.0.42.44 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updateshave been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-3508-2 https://ubuntu.com/security/notices/USN-3508-1 CVE-2017-1000405, CVE-2017-12146, CVE-2017-16939 Package Information: https://launchpad.net/ubuntu/+source/linux-hwe/4.10.0-42.46~16.04.1 . Numerous significant challenges were addressed in the hardware compatibility kernel for Ubuntu 16.04 LTS.. Linux Kernel Vulnerabilities, Ubuntu Security, Kernel Update, HWE, LTS. . LinuxSecurity.com Team
Dec 08, 2017
Ubuntu
172
security advisorydenial of servicekernelUbuntu 12.04 ESM USN-3406-2 Critical: Kernel Dos and Info Leakage
Several security issues were fixed in the Linux kernel.. =========================================================================Ubuntu Security Notice USN-3406-2 August 29, 2017 linux-lts-trusty vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 ESM Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-lts-trusty: Linux hardware enablement kernel from Trusty for Precise ESM Details: USN-3406-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 ESM. It was discovered that an out of bounds read vulnerability existed in the associative array implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or expose sensitive information. (CVE-2016-7914) It was discovered that a NULL pointer dereference existed in the Direct Rendering Manager (DRM) driver for VMWare devices in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-7261) It was discovered that the USB Cypress HID drivers for the Linux kernel did not properly validate reported information from the device. An attacker with physical access could use this to expose sensitive information (kernel memory). (CVE-2017-7273) A reference count bug was discovered in the Linux kernel ipx protocol stack. A local attacker could exploit this flaw to cause a denial of service or possibly other unspecified problems. (CVE-2017-7487) Huang Weller discovered that the ext4 filesystem implementation in the Linux kernel mishandled a needs-flushing-before-commit list. A local attacker could use this to expose sensitive information. (CVE-2017-7495) It was discovered that an information leak existed in the set_mempolicy and mbind compat syscalls in the Linuxkernel. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2017-7616) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 ESM: linux-image-3.13.0-129-generic 3.13.0-129.178~precise1 linux-image-3.13.0-129-generic-lpae 3.13.0-129.178~precise1 linux-image-generic-lpae-lts-trusty 3.13.0.129.119 linux-image-generic-lts-trusty 3.13.0.129.119 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-3406-2 https://ubuntu.com/security/notices/USN-3406-1 CVE-2016-7914, CVE-2017-7261, CVE-2017-7273, CVE-2017-7487, CVE-2017-7495, CVE-2017-7616 . Latest patches tackle several core concerns in Ubuntu Trusty HWE, enhancing overall security and reliability. Discover more details.. Ubuntu Kernel Fixes, Trusty HWE Updates, Linux Security Notices, System Updates. . Severity: Critical. LinuxSecurity.com Team
Aug 29, 2017
•Critical
Ubuntu
172
security advisorydenial of servicearbitrary code executionUbuntu 16.04 LTS USN-3377-2 Critical: Kernel HWE Security Threats
Several security issues were fixed in the Linux kernel.. =========================================================================Ubuntu Security Notice USN-3377-2 August 03, 2017 linux-hwe vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-hwe: Linux hardware enablement (HWE) kernel Details: USN-3377-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.04 for Ubuntu 16.04 LTS. Fan Wu and Shixiong Zhao discovered a race condition between inotify events and vfs rename operations in the Linux kernel. An unprivileged local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. (CVE-2017-7533) It was discovered that the Linux kernel did not properly restrict RLIMIT_STACK size. A local attacker could use this in conjunction with another vulnerability to possibly execute arbitrary code. (CVE-2017-1000365) 李强 discovered that the Virtio GPU driver in the Linux kernel did not properly free memory in some situations. A local attacker could use this to cause a denial of service (memory consumption). (CVE-2017-10810) 石磊 discovered that the RxRPC Kerberos 5 ticket handling code in the Linux kernel did not properly verify metadata. A remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-7482) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS: linux-image-4.10.0-30-generic 4.10.0-30.34~16.04.1 linux-image-4.10.0-30-generic-lpae 4.10.0-30.34~16.04.1 linux-image-4.10.0-30-lowlatency 4.10.0-30.34~16.04.1 linux-image-generic-hwe-16.04 4.10.0.30.33 linux-image-generic-lpae-hwe-16.04 4.10.0.30.33 linux-image-lowlatency-hwe-16.04 4.10.0.30.33 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-3377-2 https://ubuntu.com/security/notices/USN-3377-1 CVE-2017-1000365, CVE-2017-10810, CVE-2017-7482, CVE-2017-7533 Package Information: https://launchpad.net/ubuntu/+source/linux-hwe/4.10.0-30.34~16.04.1 . Crucial Ubuntu refresh addresses multiple HWE kernel issues, improving safety and reinforcing overall system reliability.. Kernel Updates, HWE Security Fixes, Ubuntu Security. . Severity: Critical. LinuxSecurity.com Team
Aug 03, 2017
•Critical
Ubuntu
172
security advisorydoSkernelUbuntu 16.04 LTS: USN-3251-2 Critical: Kernel DoS Threat
The system could be made to crash or run programs as an administrator.. =========================================================================Ubuntu Security Notice USN-3251-2 March 30, 2017 linux-hwe vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: The system could be made to crash or run programs as an administrator. Software Description: - linux-hwe: Linux hardware enablement (HWE) kernel Details: USN-3251-1 fixed a vulnerability in the Linux kernel for Ubuntu 16.10. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.10 for Ubuntu 16.04 LTS. It was discovered that the xfrm framework for transforming packets in the Linux kernel did not properly validate data received from user space. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code with administrative privileges. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS: linux-image-4.8.0-45-generic 4.8.0-45.48~16.04.1 linux-image-4.8.0-45-generic-lpae 4.8.0-45.48~16.04.1 linux-image-4.8.0-45-lowlatency 4.8.0-45.48~16.04.1 linux-image-generic-hwe-16.04 4.8.0.45.17 linux-image-generic-lpae-hwe-16.04 4.8.0.45.17 linux-image-lowlatency-hwe-16.04 4.8.0.45.17 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-3251-2 https://ubuntu.com/security/notices/USN-3251-1 CVE-2017-7184 Package Information: https://launchpad.net/ubuntu/+source/linux-hwe/4.8.0-45.48~16.04.1 . Important security patch for Ubuntu 16.04 targets a kernel vulnerability that might allow malicious actors to destabilize the system or run unauthorized code.. Linux Kernel, Ubuntu HWE, Admin Privileges, Security Issue. . Severity: Critical. LinuxSecurity.com Team
Mar 30, 2017
•Critical
Ubuntu
172
security advisorydoSkernelUbuntu 12.04 LTS USN-3034-2 Critical: Linux Kernel Denial of Service
The system could be made to crash under certain conditions.. =========================================================================Ubuntu Security Notice USN-3034-2 July 14, 2016 linux-lts-trusty vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: The system could be made to crash under certain conditions. Software Description: - linux-lts-trusty: Linux hardware enablement kernel from Trusty for Precise Details: USN-3034-1 fixed a vulnerability in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 LTS. Jan Stancek discovered that the Linux kernel's memory manager did not properly handle moving pages mapped by the asynchronous I/O (AIO) ring buffer to the other nodes. A local attacker could use this to cause a denial of service (system crash). Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: linux-image-3.13.0-92-generic 3.13.0-92.139~precise1 linux-image-3.13.0-92-generic-lpae 3.13.0-92.139~precise1 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-3034-2 https://ubuntu.com/security/notices/USN-3034-1 CVE-2016-3070 Package Information: https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-92.139~precise1 . The Ubuntu 12.04 LTSoperating system may experience a crash when certain conditions arise, related to a flaw in the kernel. Guidelines for applying updates are provided.. Ubuntu Kernel Update, Trusty HWE Vulnerability, System Crash Advisory. . Severity: Critical. LinuxSecurity.com Team
Jul 14, 2016
•Critical
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!