Summary
Felix Wilhelm discovered that the Xen netback driver in the Linux kernel
did not properly perform input validation in some situations. An attacker
could use this to cause a denial of service (system crash) or possibly
execute arbitrary code. (CVE-2018-15471)
It was discovered that the generic SCSI driver in the Linux kernel did not
properly enforce permissions on kernel memory access. A local attacker
could use this to expose sensitive information or possibly elevate
privileges. (CVE-2017-13168)
It was discovered that an integer overflow existed in the CD-ROM driver of
the Linux kernel. A local attacker could use this to expose sensitive
information (kernel memory). (CVE-2018-16658)
It was discovered that an integer overflow existed in the HID Bluetooth
implementation in the Linux kernel that could lead to a buffer overwrite.
An attacker could use this to cause a denial of service (system crash) or
possibly execute arbitrary code. (CVE-2018-9363)
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-39.42 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws | 4.15.0-1027.27 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-azure | 4.15.0-1031.32 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp | 4.15.0-1024.25 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-kvm | 4.15.0-1026.26 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oem | 4.15.0-1026.31 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi2 | 4.15.0-1028.30 |
Vulnerabilities 4
-
Unscored —
An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android …
-
Unscored —
An issue was discovered in xenvif_set_hash_mapping in drivers/net/xen-netback/hash.c in the Linux kernel through 4.18.1…
-
Unscored —
An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdrom_ioctl_drive_status in drivers/c…
-
Unscored —
In the hidp_process_report in bluetooth, there is an integer overflow. This could lead to an out of bounds write with n…