Summary
USN-3901-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04
LTS. This update provides the corresponding updates for the Linux
Hardware Enablement (HWE) kernel from Ubuntu 18.04 LTS for Ubuntu
16.04 LTS.
Jann Horn discovered that the userfaultd implementation in the Linux kernel
did not properly restrict access to certain ioctls. A local attacker could
use this possibly to modify files. (CVE-2018-18397)
It was discovered that the crypto subsystem of the Linux kernel leaked
uninitialized memory to user space in some situations. A local attacker
could use this to expose sensitive information (kernel memory).
(CVE-2018-19854)
Jann Horn discovered a race condition in the fork() system call in the
Linux kernel. A local attacker could use this to gain access to services
that cache authorizations. (CVE-2019-6133)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | linux-azure | 4.15.0-1040.44~14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-aws-hwe | 4.15.0-1033.35~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-azure | 4.15.0-1040.44 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-gcp | 4.15.0-1028.29~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-hwe | 4.15.0-46.49~16.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | linux-oracle | 4.15.0-1009.11~16.04.1 |
Vulnerabilities 3
-
Unscored —
The userfaultfd implementation in the Linux kernel before 4.19.7 mishandles access control for certain UFFDIO_ ioctl ca…
-
Unscored —
An issue was discovered in the Linux kernel before 4.19.3. crypto_report_one() and related functions in crypto/crypto_u…
-
Unscored —
In PolicyKit (aka polkit) 0.115, the "start time" protection mechanism can be bypassed because fork() is not atomic, an…