USN-3753-1: Linux kernel vulnerabilities
24 August 2018
Several security issues were fixed in the Linux kernel.
Releases
Packages
- linux - Linux kernel
- linux-aws - Linux kernel for Amazon Web Services (AWS) systems
- linux-kvm - Linux kernel for cloud environments
- linux-raspi2 - Linux kernel for Raspberry Pi 2
- linux-snapdragon - Linux kernel for Snapdragon processors
Details
It was discovered that the generic SCSI driver in the Linux kernel did not
properly enforce permissions on kernel memory access. A local attacker
could use this to expose sensitive information or possibly elevate
privileges. (CVE-2017-13168)
Wen Xu discovered that a use-after-free vulnerability existed in the ext4
filesystem implementation in the Linux kernel. An attacker could use this
to construct a malicious ext4 image that, when mounted, could cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2018-10876, CVE-2018-10879)
Wen Xu discovered that a buffer overflow existed in the ext4 filesystem
implementation in the Linux kernel. An attacker could use this to construct
a malicious ext4 image that, when mounted, could cause a denial of service
(system crash) or possibly execute arbitrary code. (CVE-2018-10877)
Wen Xu discovered that an out-of-bounds write vulnerability existed in the
ext4 filesystem implementation in the Linux kernel. An attacker could use
this to construct a malicious ext4 image that, when mounted, could cause a
denial of service (system crash) or possibly execute arbitrary code.
(CVE-2018-10878, CVE-2018-10882)
Wen Xu discovered that the ext4 filesystem implementation in the Linux
kernel did not properly keep meta-data information consistent in some
situations. An attacker could use this to construct a malicious ext4 image
that, when mounted, could cause a denial of service (system crash).
(CVE-2018-10881)
Shankara Pailoor discovered that the JFS filesystem implementation in the
Linux kernel contained a buffer overflow when handling extended attributes.
A local attacker could use this to cause a denial of service (system crash)
or possibly execute arbitrary code. (CVE-2018-12233)
Wen Xu discovered that the XFS filesystem implementation in the Linux
kernel did not properly handle an error condition with a corrupted xfs
image. An attacker could use this to construct a malicious xfs image that,
when mounted, could cause a denial of service (system crash).
(CVE-2018-13094)
It was discovered that the Linux kernel did not properly handle setgid file
creation when performed by a non-member of the group. A local attacker
could use this to gain elevated privileges. (CVE-2018-13405)
Silvio Cesare discovered that the generic VESA frame buffer driver in the
Linux kernel contained an integer overflow. A local attacker could use this
to cause a denial of service (system crash) or possibly execute arbitrary
code. (CVE-2018-13406)
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 16.04
-
linux-image-4.4.0-1032-kvm
-
4.4.0-1032.38
-
linux-image-4.4.0-1066-aws
-
4.4.0-1066.76
-
linux-image-4.4.0-1095-raspi2
-
4.4.0-1095.103
-
linux-image-4.4.0-1099-snapdragon
-
4.4.0-1099.104
-
linux-image-4.4.0-134-generic
-
4.4.0-134.160
-
linux-image-4.4.0-134-generic-lpae
-
4.4.0-134.160
-
linux-image-4.4.0-134-lowlatency
-
4.4.0-134.160
-
linux-image-4.4.0-134-powerpc-e500mc
-
4.4.0-134.160
-
linux-image-4.4.0-134-powerpc-smp
-
4.4.0-134.160
-
linux-image-4.4.0-134-powerpc64-emb
-
4.4.0-134.160
-
linux-image-4.4.0-134-powerpc64-smp
-
4.4.0-134.160
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
Related notices
- USN-3820-3: linux-image-unsigned-4.15.0-1031-azure, linux-azure
- USN-3820-2: linux-hwe, linux-image-unsigned-4.15.0-1024-gcp, linux-image-unsigned-4.15.0-39-generic, linux-azure, linux-image-unsigned-4.15.0-1031-azure, linux-image-4.15.0-39-generic-lpae, linux-image-4.15.0-39-lowlatency, linux-image-unsigned-4.15.0-39-lowlatency, linux-gcp, linux-image-4.15.0-39-generic
- USN-3820-1: linux-gcp, linux-image-4.15.0-39-generic, linux-image-4.15.0-1026-kvm, linux-image-unsigned-4.15.0-39-generic, linux-azure, linux-image-4.15.0-1028-raspi2, linux-image-4.15.0-39-lowlatency, linux-image-4.15.0-1027-aws, linux-image-unsigned-4.15.0-1024-gcp, linux-raspi2, linux-image-4.15.0-39-snapdragon, linux-image-unsigned-4.15.0-1031-azure, linux-image-unsigned-4.15.0-1026-oem, linux-image-unsigned-4.15.0-39-lowlatency, linux-kvm, linux-oem, linux, linux-image-4.15.0-39-generic-lpae, linux-aws
- USN-3753-2: linux-image-4.4.0-134-powerpc64-smp, linux-image-4.4.0-134-generic, linux-lts-xenial, linux-image-4.4.0-134-powerpc-smp, linux-image-4.4.0-134-powerpc64-emb, linux-image-4.4.0-134-lowlatency, linux-image-4.4.0-1028-aws, linux-image-4.4.0-134-powerpc-e500mc, linux-image-4.4.0-134-generic-lpae, linux-aws, linux-image-extra-4.4.0-134-generic
- USN-3822-2: linux-image-3.13.0-162-generic-lpae, linux-lts-trusty, linux-image-generic-lts-trusty, linux-image-3.13.0-162-generic, linux-image-generic-lpae-lts-trusty
- USN-3822-1: linux-image-3.13.0-162-generic-lpae, linux-image-3.13.0-162-powerpc-e500, linux-image-3.13.0-162-powerpc64-emb, linux-image-3.13.0-162-powerpc-e500mc, linux-image-3.13.0-162-powerpc64-smp, linux, linux-image-3.13.0-162-generic, linux-image-3.13.0-162-powerpc-smp, linux-image-extra-3.13.0-162-generic, linux-image-3.13.0-162-lowlatency
- USN-3871-4: linux-image-gke, linux-image-generic-hwe-16.04, linux-hwe, linux-image-gcp, linux-image-oem, linux-image-4.15.0-45-lowlatency, linux-image-generic-lpae-hwe-16.04, linux-image-virtual-hwe-16.04, linux-image-4.15.0-45-generic, linux-aws-hwe, linux-image-4.15.0-45-generic-lpae, linux-image-aws-hwe, linux-gcp, linux-image-4.15.0-1032-aws, linux-image-lowlatency-hwe-16.04, linux-image-4.15.0-1027-gcp
- USN-3871-1: linux-image-generic-hwe-16.04, linux-image-virtual-hwe-16.04-edge, linux-image-generic-lpae-hwe-16.04, linux-image-virtual-hwe-16.04, linux-image-lowlatency-hwe-16.04, linux-image-4.15.0-44-snapdragon, linux-image-4.15.0-44-generic, linux, linux-image-generic, linux-image-generic-lpae, linux-image-generic-hwe-16.04-edge, linux-image-virtual, linux-image-lowlatency-hwe-16.04-edge, linux-image-4.15.0-44-generic-lpae, linux-image-generic-lpae-hwe-16.04-edge, linux-image-lowlatency, linux-image-snapdragon, linux-image-4.15.0-44-lowlatency
- USN-3871-5: linux-image-azure, linux-image-4.15.0-1037-azure, linux-azure
- USN-3871-3: linux-image-4.15.0-1029-kvm, linux-image-gke, linux-kvm, linux-image-gcp, linux-image-oem, linux-image-4.15.0-1031-raspi2, linux-image-aws, linux-oem, linux-raspi2, linux-image-raspi2, linux-image-kvm, linux-image-4.15.0-1033-oem, linux-aws, linux-gcp, linux-image-4.15.0-1032-aws, linux-image-4.15.0-1027-gcp
- USN-3754-1: linux-image-3.13.0-157-lowlatency, linux-image-3.13.0-157-powerpc-e500, linux-image-3.13.0-157-powerpc64-smp, linux-image-extra-3.13.0-157-generic, linux-image-3.13.0-157-powerpc-e500mc, linux, linux-image-3.13.0-157-generic, linux-image-3.13.0-157-generic-lpae, linux-image-3.13.0-157-powerpc-smp, linux-image-3.13.0-157-powerpc64-emb
- USN-3752-2: linux-image-4.15.0-33-generic, linux-hwe, linux-image-4.15.0-33-generic-lpae, linux-image-4.15.0-33-lowlatency, linux-image-unsigned-4.15.0-33-generic, linux-image-unsigned-4.15.0-33-lowlatency
- USN-3752-1: linux-kvm, linux-image-4.15.0-33-generic, linux-image-4.15.0-33-generic-lpae, linux-image-4.15.0-33-snapdragon, linux-image-unsigned-4.15.0-1018-gcp, linux-raspi2, linux, linux-image-4.15.0-1020-aws, linux-image-4.15.0-1021-raspi2, linux-image-4.15.0-1020-kvm, linux-aws, linux-image-4.15.0-33-lowlatency, linux-gcp, linux-image-unsigned-4.15.0-33-generic, linux-image-unsigned-4.15.0-33-lowlatency
- USN-3752-3: linux-image-unsigned-4.15.0-1017-oem, linux-azure, linux-image-unsigned-4.15.0-1018-gcp, linux-oem, linux-image-unsigned-4.15.0-1022-azure, linux-gcp