linux - security update

Fixed packages 2

Vulnerabilities 16

• Medium 5.5
  CVE-2017-7518

  A flaw was found in the Linux kernel before version 4.12 in the way the KVM module processed the trap flag(TF) bit in E…

  [UNKNOWN] kernel: linux-raspi2 linux-hwe Debian Ubuntu
  Jul 30, 2018
• Unscored —
  CVE-2017-1000111

  Linux kernel: heap out-of-bounds in AF_PACKET sockets. This new issue is analogous to previously disclosed CVE-2016-865…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Oct 4, 2017
• Unscored —
  CVE-2017-1000112 Public exploit EPSS 21%

  Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. When building a UFO packet with MSG_MORE…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Oct 4, 2017
• Unscored —
  CVE-2017-1000251 Public exploit EPSS 16%

  The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and inclu…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 12, 2017
• Unscored —
  CVE-2017-1000370 Public exploit

  The offset2lib patch as used in the Linux Kernel contains a vulnerability that allows a PIE binary to be execve()'ed wi…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jun 19, 2017
• Unscored —
  CVE-2017-1000371 Public exploit

  The offset2lib patch as used by the Linux Kernel contains a vulnerability, if RLIMIT_STACK is set to RLIM_INFINITY and …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jun 19, 2017
• Unscored —
  CVE-2017-1000380

  sound/core/timer.c in the Linux kernel before 4.11.5 is vulnerable to a data race in the ALSA /dev/snd/timer driver res…

  linux-raspi2 linux-hwe linux-riscv linux Debian Ubuntu
  Jun 17, 2017
• Unscored —
  CVE-2017-11600

  net/xfrm/xfrm_policy.c in the Linux kernel through 4.12.3, when CONFIG_XFRM_MIGRATE is enabled, does not ensure that th…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Jul 24, 2017
• Unscored —
  CVE-2017-12134

  The xen_biovec_phys_mergeable function in drivers/xen/biomerge.c in Xen might allow local OS guest users to corrupt blo…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Aug 24, 2017
• Unscored —
  CVE-2017-12153

  A security flaw was discovered in the nl80211_set_rekey_data() function in net/wireless/nl80211.c in the Linux kernel t…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 21, 2017
• Unscored —
  CVE-2017-12154

  The prepare_vmcs02 function in arch/x86/kvm/vmx.c in the Linux kernel through 4.13.3 does not ensure that the "CR8-load…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Sep 26, 2017
• Unscored —
  CVE-2017-14106

  The tcp_disconnect function in net/ipv4/tcp.c in the Linux kernel before 4.12 allows local users to cause a denial of s…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 1, 2017
• Unscored —
  CVE-2017-14140

  The move_pages system call in mm/migrate.c in the Linux kernel before 4.12.9 doesn't check the effective uid of the tar…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 5, 2017
• Unscored —
  CVE-2017-14156

  The atyfb_ioctl function in drivers/video/fbdev/aty/atyfb_base.c in the Linux kernel through 4.12.10 does not initializ…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 5, 2017
• Unscored —
  CVE-2017-14340

  The XFS_IS_REALTIME_INODE macro in fs/xfs/xfs_linux.h in the Linux kernel before 4.13.2 does not verify that a filesyst…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 15, 2017
• Unscored —
  CVE-2017-14489 Public exploit

  The iscsi_if_rx function in drivers/scsi/scsi_transport_iscsi.c in the Linux kernel through 4.13.2 allows local users t…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 15, 2017