Summary
USN-3326-1 fixed vulnerabilities in the Linux kernel for Ubuntu
16.10. This update provides the corresponding updates for the
Linux Hardware Enablement (HWE) kernel from Ubuntu 16.10 for Ubuntu
16.04 LTS.
It was discovered that the stack guard page for processes in the Linux
kernel was not sufficiently large enough to prevent overlapping with the
heap. An attacker could leverage this with another vulnerability to execute
arbitrary code and gain administrative privileges
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux-hwe | 4.8.0-56.61~16.04.1 |
Vulnerabilities 1
-
Unscored —CVE-2017-1000364 Public exploit
An issue was discovered in the size of the stack guard page on Linux, specifically a 4k stack guard page is not suffici…
References
-
report
https://ubuntu.com/security/CVE-2017-1000364