Summary
It was discovered that the VirtIO subsystem in the Linux kernel did not
properly initialize memory in some situations. A local attacker could use
this to possibly expose sensitive information (kernel memory).
(CVE-2018-1118)
Seunghun Han discovered an information leak in the ACPI handling code in
the Linux kernel when handling early termination of ACPI table loading. A
local attacker could use this to expose sensitive informal (kernel address
locations). (CVE-2017-13695)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-34.37 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws | 4.15.0-1021.21 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-azure | 4.15.0-1023.24 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp | 4.15.0-1019.20 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-kvm | 4.15.0-1021.21 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi2 | 4.15.0-1022.24 |
Vulnerabilities 2
-
Low 2.3
Linux kernel vhost since version 4.8 does not properly initialize memory in messages passed between virtual guests and …
-
Unscored —
The acpi_ns_evaluate() function in drivers/acpi/acpica/nseval.c in the Linux kernel through 4.12.9 does not flush the o…