Summary
Jann Horn discovered that the OverlayFS and ShiftFS Drivers in the Linux
kernel did not properly handle reference counting during memory mapping
operations when used in conjunction with AUFS. A local attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code. (CVE-2019-15794)
It was discovered that a buffer overflow existed in the 802.11 Wi-Fi
configuration interface for the Linux kernel when handling beacon settings.
A local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2019-16746)
It was discovered that there was a memory leak in the Advanced Buffer
Management functionality of the Netronome NFP4000/NFP6000 NIC Driver in the
Linux kernel during certain error scenarios. A local attacker could use
this to cause a denial of service (memory exhaustion). (CVE-2019-19076)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 18.04 LTS 18.04:LTS | linux-aws-5.0 | 5.0.0-1022.25~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gcp | 5.0.0-1026.27~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-gke-5.0 | 5.0.0-1026.27~18.04.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-hwe | 5.0.0-37.40~18.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oem-osp1 | 5.0.0-1030.34 |
| Ubuntu · 18.04 LTS 18.04:LTS | linux-oracle-5.0 | 5.0.0-1008.13~18.04.1 |
Vulnerabilities 3
-
High 7.1CVE-2019-15794 Public exploit
Reference counting error in overlayfs/shiftfs error path when used in conjuction with aufs
Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the original value is not restored, and the reference is put for t…
-
Unscored —
An issue was discovered in net/wireless/nl80211.c in the Linux kernel through 5.2.17. It does not check the length of v…
-
Unscored —
A memory leak in the nfp_abm_u32_knode_replace() function in drivers/net/ethernet/netronome/nfp/abm/cls.c in the Linux …