Summary
USN-3548-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.10.
This update provides the corresponding updates for the Linux
Hardware Enablement (HWE) kernel from Ubuntu 17.10 for Ubuntu
16.04 LTS.
Jay Vosburgh discovered a logic error in the x86-64 syscall entry
implementation in the Linux kernel, introduced as part of the
mitigations for the Spectre vulnerability. A local attacker could use
this to cause a denial of service or possibly execute arbitrary code.
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | linux-azure | 4.13.0-1007.9 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-gcp | 4.13.0-1008.11 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-hwe | 4.13.0-32.35~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-oem | 4.13.0-1019.20 |
References
-
report
https://launchpad.net/bugs/1745564