Summary
Jann Horn discovered that the userfaultd implementation in the Linux kernel
did not properly restrict access to certain ioctls. A local attacker could
use this possibly to modify files. (CVE-2018-18397)
It was discovered that the crypto subsystem of the Linux kernel leaked
uninitialized memory to user space in some situations. A local attacker
could use this to expose sensitive information (kernel memory).
(CVE-2018-19854)
Jann Horn discovered a race condition in the fork() system call in
the Linux kernel. A local attacker could use this to gain access to
services that cache authorizations. (CVE-2019-6133)
Fixed packages 7
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | linux | 4.15.0-46.49 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws | 4.15.0-1033.35 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp | 4.15.0-1028.29 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-kvm | 4.15.0-1030.30 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oem | 4.15.0-1034.39 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle | 4.15.0-1009.11 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-raspi2 | 4.15.0-1032.34 |
Vulnerabilities 3
-
Unscored —
The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl ca…
-
Unscored —
An issue was discovered in the Linux kernel before 4.19.3. crypto_report_one() and related functions in crypto/crypto_u…
-
Unscored —
In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, an…