Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found -2 articles for you...
172
security advisorydenial of serviceupdateUbuntu 12.04 ESM: USN-3822-2 Critical: DoS Kernel Issues
Several security issues were fixed in the Linux kernel.. =========================================================================Ubuntu Security Notice USN-3822-2 November 14, 2018 linux-lts-trusty vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 ESM Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-lts-trusty: Linux hardware enablement kernel from Trusty for Precise ESM Details: USN-3822-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 ESM. Jim Mattson discovered that the KVM implementation in the Linux kernel mismanages the #BP and #OF exceptions. A local attacker in a guest virtual machine could use this to cause a denial of service (guest OS crash). (CVE-2016-9588) It was discovered that the generic SCSI driver in the Linux kernel did not properly enforce permissions on kernel memory access. A local attacker could use this to expose sensitive information or possibly elevate privileges. (CVE-2017-13168) Andrey Konovalov discovered that the CDC USB Ethernet driver did not properly validate device descriptors. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2017-16649) It was discovered that an integer overflow existed in the CD-ROM driver of the Linux kernel. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-16658) It was discovered that an integer overflow existed in the HID Bluetooth implementation in the Linux kernel that could lead to a buffer overwrite. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-9363) Update instructions: The problem can be corrected by updating your system to the following packageversions: Ubuntu 12.04 ESM: linux-image-3.13.0-162-generic 3.13.0-162.212~precise1 linux-image-3.13.0-162-generic-lpae 3.13.0-162.212~precise1 linux-image-generic-lpae-lts-trusty 3.13.0.162.152 linux-image-generic-lts-trusty 3.13.0.162.152 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-3822-2 https://ubuntu.com/security/notices/USN-3822-1 CVE-2016-9588, CVE-2017-13168, CVE-2017-16649, CVE-2018-16658, CVE-2018-9363 . The Ubuntu USN-4823-1 notice points out various kernel security updates in Bionic HWE, emphasizing urgent threats.. Ubuntu Kernel Update, Trusty HWE Security Fix, DoS Risks. . Severity: Critical. LinuxSecurity.com Team
Nov 14, 2018
•Critical
Ubuntu
172
security advisoryDoSkernelUbuntu 12.04 ESM USN-3742-3 Critical Trusty HWE Kernel Update
USN-3742-2 introduced regressions in the Linux Hardware Enablement(HWE) kernel for Ubuntu 12.04 ESM.. =========================================================================Ubuntu Security Notice USN-3742-3 August 21, 2018 linux-lts-trusty regressions ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 ESM Summary: USN-3742-2 introduced regressions in the Linux Hardware Enablement (HWE) kernel for Ubuntu 12.04 ESM. Software Description: - linux-lts-trusty: Linux hardware enablement kernel from Trusty for Precise ESM Details: USN-3742-2 introduced mitigations in the Linux Hardware Enablement (HWE) kernel for Ubuntu 12.04 ESM to address L1 Terminal Fault (L1TF) vulnerabilities (CVE-2018-3620, CVE-2018-3646). Unfortunately, the update introduced regressions that caused kernel panics when booting in some environments as well as preventing Java applications from starting. This update fixes the problems. We apologize for the inconvenience. Original advisory details: It was discovered that memory present in the L1 data cache of an Intel CPU core may be exposed to a malicious process that is executing on the CPU core. This vulnerability is also known as L1 Terminal Fault (L1TF). A local attacker in a guest virtual machine could use this to expose sensitive information (memory from other guests or the host OS). (CVE-2018-3646) It was discovered that memory present in the L1 data cache of an Intel CPU core may be exposed to a malicious process that is executing on the CPU core. This vulnerability is also known as L1 Terminal Fault (L1TF). A local attacker could use this to expose sensitive information (memory from the kernel or other processes). (CVE-2018-3620) Andrey Konovalov discovered an out-of-bounds read in the POSIX timers subsystem in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or expose sensitive information. (CVE-2017-18344) Juha-Matti Tilli discovered that the TCP implementation in the Linux kernel performed algorithmically expensive operations in some situations when handling incoming packets. A remote attacker could use this to cause a denial of service. (CVE-2018-5390) Juha-Matti Tilli discovered that the IP implementation in the Linux kernel performed algorithmically expensive operations in some situations when handling incoming packet fragments. A remote attacker could use this to cause a denial of service. (CVE-2018-5391) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 ESM: linux-image-3.13.0-156-generic 3.13.0-156.206~precise1 linux-image-3.13.0-156-generic-lpae 3.13.0-156.206~precise1 linux-image-generic-lpae-lts-trusty 3.13.0.156.146 linux-image-generic-lts-trusty 3.13.0.156.146 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-3742-3 https://ubuntu.com/security/notices/USN-3742-2 https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1787127 https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1787258 https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/L1TF . Ubuntu Security Notice USN-3742-3 addresses recent kernel update challenges in Trusty HWE, detailing user issues and swift resolution measures taken.. Kernel Update, Ubuntu Security Notice, Trusty HWE, System Crash, DoS Attack. . Severity: Critical. LinuxSecurity.com Team
Aug 21, 2018
•Critical
Ubuntu
172
security advisorydenial of servicekernelUbuntu 12.04 ESM USN-3406-2 Critical: Kernel Dos and Info Leakage
Several security issues were fixed in the Linux kernel.. =========================================================================Ubuntu Security Notice USN-3406-2 August 29, 2017 linux-lts-trusty vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 ESM Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-lts-trusty: Linux hardware enablement kernel from Trusty for Precise ESM Details: USN-3406-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 ESM. It was discovered that an out of bounds read vulnerability existed in the associative array implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or expose sensitive information. (CVE-2016-7914) It was discovered that a NULL pointer dereference existed in the Direct Rendering Manager (DRM) driver for VMWare devices in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-7261) It was discovered that the USB Cypress HID drivers for the Linux kernel did not properly validate reported information from the device. An attacker with physical access could use this to expose sensitive information (kernel memory). (CVE-2017-7273) A reference count bug was discovered in the Linux kernel ipx protocol stack. A local attacker could exploit this flaw to cause a denial of service or possibly other unspecified problems. (CVE-2017-7487) Huang Weller discovered that the ext4 filesystem implementation in the Linux kernel mishandled a needs-flushing-before-commit list. A local attacker could use this to expose sensitive information. (CVE-2017-7495) It was discovered that an information leak existed in the set_mempolicy and mbind compat syscalls in the Linuxkernel. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2017-7616) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 ESM: linux-image-3.13.0-129-generic 3.13.0-129.178~precise1 linux-image-3.13.0-129-generic-lpae 3.13.0-129.178~precise1 linux-image-generic-lpae-lts-trusty 3.13.0.129.119 linux-image-generic-lts-trusty 3.13.0.129.119 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-3406-2 https://ubuntu.com/security/notices/USN-3406-1 CVE-2016-7914, CVE-2017-7261, CVE-2017-7273, CVE-2017-7487, CVE-2017-7495, CVE-2017-7616 . Latest patches tackle several core concerns in Ubuntu Trusty HWE, enhancing overall security and reliability. Discover more details.. Ubuntu Kernel Fixes, Trusty HWE Updates, Linux Security Notices, System Updates. . Severity: Critical. LinuxSecurity.com Team
Aug 29, 2017
•Critical
Ubuntu
172
security advisorydenial of servicekernel updateUbuntu 14.04 LTS USN-3169-2 Moderate: KVM Memory Exposure
Several security issues were fixed in the kernel.. =========================================================================Ubuntu Security Notice USN-3169-2 January 11, 2017 linux-lts-xenial vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 LTS Summary: Several security issues were fixed in the kernel. Software Description: - linux-lts-xenial: Linux hardware enablement kernel from Xenial for Trusty Details: USN-3169-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. Dmitry Vyukov discovered that the KVM implementation in the Linux kernel did not properly initialize the Code Segment (CS) in certain error cases. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2016-9756) Andrey Konovalov discovered that signed integer overflows existed in the setsockopt() system call when handling the SO_SNDBUFFORCE and SO_RCVBUFFORCE options. A local attacker with the CAP_NET_ADMIN capability could use this to cause a denial of service (system crash or memory corruption). (CVE-2016-9793) Baozeng Ding discovered a race condition that could lead to a use-after- free in the Advanced Linux Sound Architecture (ALSA) subsystem of the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2016-9794) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 LTS: linux-image-4.4.0-59-generic 4.4.0-59.80~14.04.1 linux-image-4.4.0-59-generic-lpae 4.4.0-59.80~14.04.1 linux-image-4.4.0-59-lowlatency 4.4.0-59.80~14.04.1 linux-image-4.4.0-59-powerpc-e500mc 4.4.0-59.80~14.04.1 linux-image-4.4.0-59-powerpc-smp 4.4.0-59.80~14.04.1 linux-image-4.4.0-59-powerpc64-emb 4.4.0-59.80~14.04.1 linux-image-4.4.0-59-powerpc64-smp 4.4.0-59.80~14.04.1 linux-image-generic-lpae-lts-xenial 4.4.0.59.46 linux-image-generic-lts-xenial 4.4.0.59.46 linux-image-lowlatency-lts-xenial 4.4.0.59.46 linux-image-powerpc-e500mc-lts-xenial 4.4.0.59.46 linux-image-powerpc-smp-lts-xenial 4.4.0.59.46 linux-image-powerpc64-emb-lts-xenial 4.4.0.59.46 linux-image-powerpc64-smp-lts-xenial 4.4.0.59.46 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-3169-2 CVE-2016-9756, CVE-2016-9793, CVE-2016-9794 Package Information: https://launchpad.net/ubuntu/+source/linux-lts-xenial/4.4.0-59.80~14.04.1 . A set of security updates was issued for the Linux kernel in Ubuntu on January 12, bolstering the system's security measures.. Security Notice, Kernel Update, Ubuntu Security Fixes. . LinuxSecurity.com Team
Jan 11, 2017
Ubuntu
172
security advisorydenial of serviceubuntuUbuntu 12.04 LTS USN-2975-2 Critical: Kernel DoS Security Issue
The system could be made to crash or run programs as an administrator.. =========================================================================Ubuntu Security Notice USN-2975-2 May 16, 2016 linux-lts-trusty vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: The system could be made to crash or run programs as an administrator. Software Description: - linux-lts-trusty: Linux hardware enablement kernel from Trusty for Precise Details: USN-2975-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 LTS. Philip Pettersson discovered that the Linux kernel's ASN.1 DER decoder did not properly process certificate files with tags of indefinite length. A local unprivileged attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code with administrative privileges. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: linux-image-3.13.0-86-generic 3.13.0-86.131~precise1 linux-image-3.13.0-86-generic-lpae 3.13.0-86.131~precise1 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-trusty, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-2975-2 https://ubuntu.com/security/notices/USN-2975-1 CVE-2016-0758 Package Information: https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-86.131~precise1 . The Ubuntu Security Advisory USN-2975-2 highlights a vulnerability within the kernel that can lead to system instability or the execution of unauthorized administrative commands.. Ubuntu Kernel Vulnerability, Trusty HWE, System Crash Risk. . Severity: Critical. LinuxSecurity.com Team
May 16, 2016
•Critical
Ubuntu
172
security advisorydenial of servicebuffer overflowUbuntu 12.04 LTS USN-2378-1 Moderate: Kernel Buffer Overflow
Several security issues were fixed in the kernel.. =========================================================================Ubuntu Security Notice USN-2378-1 October 09, 2014 linux-lts-trusty vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: Several security issues were fixed in the kernel. Software Description: - linux-lts-trusty: Linux hardware enablement kernel from Trusty Details: Steven Vittitoe reported multiple stack buffer overflows in Linux kernel's magicmouse HID driver. A physically proximate attacker could exploit this flaw to cause a denial of service (system crash) or possibly execute arbitrary code via specially crafted devices. (CVE-2014-3181) Ben Hawkes reported some off by one errors for report descriptors in the Linux kernel's HID stack. A physically proximate attacker could exploit these flaws to cause a denial of service (out-of-bounds write) via a specially crafted device. (CVE-2014-3184) Several bounds check flaws allowing for buffer overflows were discovered in the Linux kernel's Whiteheat USB serial driver. A physically proximate attacker could exploit these flaws to cause a denial of service (system crash) via a specially crafted device. (CVE-2014-3185) Steven Vittitoe reported a buffer overflow in the Linux kernel's PicoLCD HID device driver. A physically proximate attacker could exploit this flaw to cause a denial of service (system crash) or possibly execute arbitrary code via a specially craft device. (CVE-2014-3186) A flaw was discovered in the Linux kernel's associative-array garbage collection implementation. A local user could exploit this flaw to cause a denial of service (system crash) or possibly have other unspecified impact by using keyctl operations. (CVE-2014-3631) A flaw was discovered in the Linux kernel's UDF filesystem (used on some CD-ROMs and DVDs) when processing indirectICBs. An attacker who can cause CD, DVD or image file with a specially crafted inode to be mounted can cause a denial of service (infinite loop or stack consumption). (CVE-2014-6410) James Eckersall discovered a buffer overflow in the Ceph filesystem in the Linux kernel. A remote attacker could exploit this flaw to cause a denial of service (memory consumption and panic) or possibly have other unspecified impact via a long unencrypted auth ticket. (CVE-2014-6416) James Eckersall discovered a flaw in the handling of memory allocation failures in the Ceph filesystem. A remote attacker could exploit this flaw to cause a denial of service (system crash) or possibly have unspecified other impact. (CVE-2014-6417) James Eckersall discovered a flaw in how the Ceph filesystem validates auth replies. A remote attacker could exploit this flaw to cause a denial of service (system crash) or possibly have other unspecified impact. (CVE-2014-6418) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: linux-image-3.13.0-37-generic 3.13.0-37.64~precise1 linux-image-3.13.0-37-generic-lpae 3.13.0-37.64~precise1 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. If you use linux-restricted-modules, you have to update that package as well to get modules which work with the new kernel version. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-server, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-2378-1 CVE-2014-3181, CVE-2014-3184, CVE-2014-3185, CVE-2014-3186, CVE-2014-3631, CVE-2014-6410, CVE-2014-6416, CVE-2014-6417, CVE-2014-6418 Package Information: https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-37.64~precise1 . Numerous vulnerabilities tackled in Ubuntu 12.04 LTS kernel to reduce various threat avenues.. Linux Kernel Security, Ubuntu Update, System Update, Buffer Overflow Exploit. . Severity: Important. LinuxSecurity.com Team
Oct 09, 2014
•Important
Ubuntu
172
security advisorycriticalkernelUbuntu 12.04 LTS: USN-2317-1 Critical: Kernel User Namespace Flaws
Several security issues were fixed in the kernel.. =========================================================================Ubuntu Security Notice USN-2317-1 August 18, 2014 linux-lts-trusty vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: Several security issues were fixed in the kernel. Software Description: - linux-lts-trusty: Linux hardware enablement kernel from Trusty Details: Eric W. Biederman discovered a flaw with the mediation of mount flags in the Linux kernel's user namespace subsystem. An unprivileged user could exploit this flaw to by-pass mount restrictions, and potentially gain administrative privileges. (CVE-2014-5207) Kenton Varda discovered a flaw with read-only bind mounds when used with user namespaces. An unprivileged local user could exploit this flaw to gain full write privileges to a mount that should be read only. (CVE-2014-5206) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: linux-image-3.13.0-34-generic 3.13.0-34.60~precise1 linux-image-3.13.0-34-generic-lpae 3.13.0-34.60~precise1 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. If you use linux-restricted-modules, you have to update that package as well to get modules which work with the new kernel version. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-server, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-2317-1 CVE-2014-5206, CVE-2014-5207 PackageInformation: https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-34.60~precise1 . The Ubuntu Security Notice USN-2317-1 addresses Linux kernel vulnerabilities with crucial updates to mitigate security risks and protect system integrity. Ubuntu Kernel Updates, Trusty HWE Issues, Kernel Security Fixes. . Severity: Critical. LinuxSecurity.com Team
Aug 18, 2014
•Critical
Ubuntu
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!