Summary
It was discovered that a use-after-free vulnerability existed in the POSIX
message queue implementation in the Linux kernel. A local attacker could
use this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2017-11176)
Huang Weller discovered that the ext4 filesystem implementation in the
Linux kernel mishandled a needs-flushing-before-commit list. A local
attacker could use this to expose sensitive information. (CVE-2017-7495)
It was discovered that a buffer overflow existed in the Broadcom FullMAC
WLAN driver in the Linux kernel. A local attacker could use this to cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2017-7541)
It was discovered that the Linux kernel did not honor the UEFI secure boot
mode when performing a kexec operation. A local attacker could use this to
bypass secure boot restrictions. (CVE-2015-7837)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux | 4.4.0-93.116 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws | 4.4.0-1032.41 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-gke | 4.4.0-1028.28 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-raspi2 | 4.4.0-1071.79 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-snapdragon | 4.4.0-1073.78 |
Vulnerabilities 4
-
Unscored —
The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secu…
-
Unscored —CVE-2017-11176 Public exploit
The mq_notify function in the Linux kernel through 4.11.9 does not set the sock pointer to NULL upon entry into the ret…
-
Unscored —
fs/ext4/inode.c in the Linux kernel before 4.6.2, when ext4 data=ordered mode is used, mishandles a needs-flushing-befo…
-
Unscored —
The brcmf_cfg80211_mgmt_tx function in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linux kernel …