linux - security update

Fixed packages 1

Vulnerabilities 13

• High 7.0
  CVE-2018-10853

  A flaw was found in the way Linux kernel KVM hypervisor before 4.18 emulated instructions such as sgdt/sidt/fxsave/fxrs…

  Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Sep 11, 2018
• Medium 5.6
  CVE-2017-5715 Public exploit EPSS 73%

  Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

  Intel Microprocessors with Speculative Execution linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Jan 4, 2018
• Medium 5.6
  CVE-2017-5753 Public exploit EPSS 94%

  Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of…

  Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Jan 4, 2018
• Medium 5.5
  CVE-2018-1130

  Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccp_write_xmit() function in net/d…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 10, 2018
• Unscored —
  CVE-2018-1000204

  Linux Kernel version 3.18 to 4.16 incorrectly handles an SG_IO ioctl on /dev/sg0 with dxfer_direction=SG_DXFER_FROM_DEV…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jun 26, 2018
• Unscored —
  CVE-2018-1066

  The Linux kernel before version 4.11 is vulnerable to a NULL pointer dereference in fs/cifs/cifsencrypt.c:setup_ntlmv2_…

  linux-raspi2 linux-hwe linux-riscv linux Linux Debian Ubuntu
  Mar 2, 2018
• Unscored —
  CVE-2018-1093

  The ext4_valid_block_bitmap function in fs/ext4/balloc.c in the Linux kernel through 4.15.15 allows attackers to cause …

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Apr 2, 2018
• Unscored —
  CVE-2018-10940

  The cdrom_ioctl_media_changed function in drivers/cdrom/cdrom.c in the Linux kernel before 4.16.6 allows local attacker…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  May 9, 2018
• Unscored —
  CVE-2018-11506

  The sr_do_ioctl function in drivers/scsi/sr_ioctl.c in the Linux kernel through 4.16.12 allows local users to cause a d…

  linux-raspi2 linux-hwe linux-azure linux-gcp Debian Ubuntu
  May 28, 2018
• Unscored —
  CVE-2018-12233

  In the ea_get function in fs/jfs/xattr.c in the Linux kernel through 4.17.1, a memory corruption bug in JFS can be trig…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jun 12, 2018
• Unscored —
  CVE-2018-3665

  System software utilizing Lazy FP state restore technique on systems using Intel Core-based microprocessors may potenti…

  Intel Intel Core-based microprocessors linux-raspi2 linux-riscv Debian Ubuntu Alpine
  Jun 21, 2018
• Unscored —
  CVE-2018-5814

  In the Linux Kernel before version 4.16.11, 4.14.43, 4.9.102, and 4.4.133, multiple race condition errors when handling…

  Linux Foundation Linux kernel linux-raspi2 linux-hwe Linux Debian Ubuntu
  Jun 12, 2018
• Unscored —
  CVE-2018-9422

  In get_futex_key of futex.c, there is a use-after-free due to improper locking. This could lead to local escalation of …

  Google Android linux-raspi2 linux-riscv Android Debian Ubuntu
  Nov 6, 2018