linux - security update

Fixed packages 1

Vulnerabilities 15

• Medium 5.6
  CVE-2017-5754 Public exploit EPSS 67%

  Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disc…

  Intel Most Modern Operating Systems linux-raspi2 linux-hwe Debian Ubuntu Alpine
  Jan 4, 2018
• Unscored —
  CVE-2017-1000407

  The Linux Kernel 2.6.32 and later are affected by a denial of service, by flooding the diagnostic port 0x80 an exceptio…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 11, 2017
• Unscored —
  CVE-2017-1000410

  The Linux kernel version 3.3-rc1 and later is affected by a vulnerability lies in the processing of incoming L2CAP comm…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 7, 2017
• Unscored —
  CVE-2017-15868

  The bnep_add_connection function in net/bluetooth/bnep/core.c in the Linux kernel before 3.19 does not ensure that an l…

  linux-raspi2 linux-riscv linux linux-gke Debian Ubuntu
  Dec 5, 2017
• Unscored —
  CVE-2017-16538

  drivers/media/usb/dvb-usb-v2/lmedm04.c in the Linux kernel through 4.13.11 allows local users to cause a denial of serv…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 4, 2017
• Unscored —
  CVE-2017-16939 Public exploit

  The XFRM dump policy implementation in net/xfrm/xfrm_user.c in the Linux kernel before 4.13.11 allows local users to ga…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 24, 2017
• Unscored —
  CVE-2017-17448

  net/netfilter/nfnetlink_cthelper.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 7, 2017
• Unscored —
  CVE-2017-17449

  The __netlink_deliver_tap_skb function in net/netlink/af_netlink.c in the Linux kernel through 4.14.4, when CONFIG_NLMO…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 7, 2017
• Unscored —
  CVE-2017-17450

  net/netfilter/xt_osf.c in the Linux kernel through 4.14.4 does not require the CAP_NET_ADMIN capability for add_callbac…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 7, 2017
• Unscored —
  CVE-2017-17558

  The usb_destroy_configuration function in drivers/usb/core/config.c in the USB core subsystem in the Linux kernel throu…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 12, 2017
• Unscored —
  CVE-2017-17741

  The KVM implementation in the Linux kernel through 4.14.7 allows attackers to obtain potentially sensitive information …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 18, 2017
• Unscored —
  CVE-2017-17805

  The Salsa20 encryption algorithm in the Linux kernel before 4.14.8 does not correctly handle zero-length inputs, allowi…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 20, 2017
• Unscored —
  CVE-2017-17806

  The HMAC implementation (crypto/hmac.c) in the Linux kernel before 4.14.8 does not validate that the underlying cryptog…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 20, 2017
• Unscored —
  CVE-2017-17807

  The KEYS subsystem in the Linux kernel before 4.14.6 omitted an access-control check when adding a key to the current t…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 20, 2017
• Unscored —
  CVE-2017-8824 Public exploit

  The dccp_disconnect function in net/dccp/proto.c in the Linux kernel through 4.14.3 allows local users to gain privileg…

  linux-raspi2 linux-hwe linux-azure linux-riscv Linux Debian Ubuntu
  Dec 5, 2017