--- title: 'USN-3910-1: Linux kernel vulnerabilities | Ubuntu security notices' description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices/USN-3910-1 --- 1. [Ubuntu Security Notices](https://ubuntu.com/security/notices) 2. USN-3910-1 --- # USN-3910-1: Linux kernel vulnerabilities Publication date 15 March 2019 Overview Several security issues were fixed in the Linux kernel. Releases [16.04 LTS](https://ubuntu.com/security/notices?release=xenial) --- Open side navigation ## Packages * [linux](https://ubuntu.com/security/cves?package=linux) - Linux kernel * [linux-aws](https://ubuntu.com/security/cves?package=linux-aws) - Linux kernel for Amazon Web Services (AWS) systems * [linux-kvm](https://ubuntu.com/security/cves?package=linux-kvm) - Linux kernel for cloud environments * [linux-raspi2](https://ubuntu.com/security/cves?package=linux-raspi2) - Linux kernel for Raspberry Pi 2 * [linux-snapdragon](https://ubuntu.com/security/cves?package=linux-snapdragon) - Linux kernel for Snapdragon processors ## Details It was discovered that the f2fs filesystem implementation in the Linux kernel did not handle the noflush\_merge mount option correctly. An attacker could use this to cause a denial of service (system crash). ([CVE-2017-18241](https://ubuntu.com/security/CVE-2017-18241)) It was discovered that the procfs filesystem did not properly handle processes mapping some memory elements onto files. A local attacker could use this to block utilities that examine the procfs filesystem to report operating system state, such as ps(1). ([CVE-2018-1120](https://ubuntu.com/security/CVE-2018-1120)) Hui Peng and Mathias Payer discovered that the Option USB High Speed driver in the Linux kernel did not properly validate metadata received from the device. A physically proximate attacker could use this to cause a denial of service (system crash). ([CVE-2018-19985](https://ubuntu.com/security/CVE-2018-19985)) It was discovered that multiple integer overflows existed... --- Show more ## Update instructions After a standard system update you need to reboot your computer to make all the necessary changes. [Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security) ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. The problem can be corrected by updating your system to the following package versions: | Ubuntu Release | Package Version | | --- | --- | | 16.04 LTS xenial | [linux-image-4.4.0-1041-kvm](https://launchpad.net/ubuntu/+source/linux-kvm) –  [4.4.0-1041.47](https://launchpad.net/ubuntu/+source/linux-kvm/4.4.0-1041.47) | | | | [linux-image-4.4.0-1077-aws](https://launchpad.net/ubuntu/+source/linux-aws) –  [4.4.0-1077.87](https://launchpad.net/ubuntu/+source/linux-aws/4.4.0-1077.87) | | | | [linux-image-4.4.0-1104-raspi2](https://launchpad.net/ubuntu/+source/linux-raspi2) –  [4.4.0-1104.112](https://launchpad.net/ubuntu/+source/linux-raspi2/4.4.0-1104.112) | | | | [linux-image-4.4.0-1108-snapdragon](https://launchpad.net/ubuntu/+source/linux-snapdragon) –  [4.4.0-1108.113](https://launchpad.net/ubuntu/+source/linux-snapdragon/4.4.0-1108.113) | | | | [linux-image-4.4.0-143-generic](https://launchpad.net/ubuntu/+source/linux-signed) –  [4.4.0-143.169](https://launchpad.net/ubuntu/+source/linux-signed/4.4.0-143.169) | | | | [linux-image-4.4.0-143-generic-lpae](https://launchpad.net/ubuntu/+source/linux) –  [4.4.0-143.169](https://launchpad.net/ubuntu/+source/linux/4.4.0-143.169) | | | | [linux-image-4.4.0-143-lowlatency](https://launchpad.net/ubuntu/+source/linux-signed) –  [4.4.0-143.169](https://launchpad.net/ubuntu/+source/linux-signed/4.4.0-143.169) | | | | [linux-image-4.4.0-143-powerpc-e500mc](https://launchpad.net/ubuntu/+source/linux) –  [4.4.0-143.169](https://launchpad.net/ubuntu/+source/linux/4.4.0-143.169) | | | | [linux-image-4.4.0-143-powerpc-smp](https://launchpad.net/ubuntu/+source/linux) –  [4.4.0-143.169](https://launchpad.net/ubuntu/+source/linux/4.4.0-143.169) | | | | [linux-image-4.4.0-143-powerpc64-emb](https://launchpad.net/ubuntu/+source/linux) –  [4.4.0-143.169](https://launchpad.net/ubuntu/+source/linux/4.4.0-143.169) | | | | [linux-image-4.4.0-143-powerpc64-smp](https://launchpad.net/ubuntu/+source/linux) –  [4.4.0-143.169](https://launchpad.net/ubuntu/+source/linux/4.4.0-143.169) | | | | [linux-image-aws](https://launchpad.net/ubuntu/+source/linux-meta-aws) –  [4.4.0.1077.80](https://launchpad.net/ubuntu/+source/linux-meta-aws/4.4.0.1077.80) | | | | [linux-image-generic](https://launchpad.net/ubuntu/+source/linux-meta) –  [4.4.0.143.151](https://launchpad.net/ubuntu/+source/linux-meta/4.4.0.143.151) | | | | [linux-image-generic-lpae](https://launchpad.net/ubuntu/+source/linux-meta) –  [4.4.0.143.151](https://launchpad.net/ubuntu/+source/linux-meta/4.4.0.143.151) | | | | [linux-image-kvm](https://launchpad.net/ubuntu/+source/linux-meta-kvm) –  [4.4.0.1041.41](https://launchpad.net/ubuntu/+source/linux-meta-kvm/4.4.0.1041.41) | | | | [linux-image-lowlatency](https://launchpad.net/ubuntu/+source/linux-meta) –  [4.4.0.143.151](https://launchpad.net/ubuntu/+source/linux-meta/4.4.0.143.151) | | | | [linux-image-powerpc-e500mc](https://launchpad.net/ubuntu/+source/linux-meta) –  [4.4.0.143.151](https://launchpad.net/ubuntu/+source/linux-meta/4.4.0.143.151) | | | | [linux-image-powerpc-smp](https://launchpad.net/ubuntu/+source/linux-meta) –  [4.4.0.143.151](https://launchpad.net/ubuntu/+source/linux-meta/4.4.0.143.151) | | | | [linux-image-powerpc64-emb](https://launchpad.net/ubuntu/+source/linux-meta) –  [4.4.0.143.151](https://launchpad.net/ubuntu/+source/linux-meta/4.4.0.143.151) | | | | [linux-image-powerpc64-smp](https://launchpad.net/ubuntu/+source/linux-meta) –  [4.4.0.143.151](https://launchpad.net/ubuntu/+source/linux-meta/4.4.0.143.151) | | | | [linux-image-raspi2](https://launchpad.net/ubuntu/+source/linux-meta-raspi2) –  [4.4.0.1104.104](https://launchpad.net/ubuntu/+source/linux-meta-raspi2/4.4.0.1104.104) | | | | [linux-image-snapdragon](https://launchpad.net/ubuntu/+source/linux-meta-snapdragon) –  [4.4.0.1108.100](https://launchpad.net/ubuntu/+source/linux-meta-snapdragon/4.4.0.1108.100) | | | | [linux-image-virtual](https://launchpad.net/ubuntu/+source/linux-meta) –  [4.4.0.143.151](https://launchpad.net/ubuntu/+source/linux-meta/4.4.0.143.151) | | | --- ### Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. [Get Ubuntu Pro](https://ubuntu.com/pro) ## References * [CVE-2019-6133](https://ubuntu.com/security/CVE-2019-6133) * [CVE-2018-7740](https://ubuntu.com/security/CVE-2018-7740) * [CVE-2018-19985](https://ubuntu.com/security/CVE-2018-19985) * [CVE-2018-1120](https://ubuntu.com/security/CVE-2018-1120) * [CVE-2017-18241](https://ubuntu.com/security/CVE-2017-18241) ## Related notices * [USN-4118-1](https://ubuntu.com/security/notices/USN-4118-1) * [USN-4115-1](https://ubuntu.com/security/notices/USN-4115-1) * [USN-3934-2](https://ubuntu.com/security/notices/USN-3934-2) * [USN-3934-1](https://ubuntu.com/security/notices/USN-3934-1) * [USN-3910-2](https://ubuntu.com/security/notices/USN-3910-2) * [USN-3908-1](https://ubuntu.com/security/notices/USN-3908-1) * [USN-3908-2](https://ubuntu.com/security/notices/USN-3908-2) * [USN-3903-2](https://ubuntu.com/security/notices/USN-3903-2) * [USN-3903-1](https://ubuntu.com/security/notices/USN-3903-1) * [USN-3901-1](https://ubuntu.com/security/notices/USN-3901-1) --- Show 4 more references --- Have additional questions? [Talk to a member of the team ›](https://wiki.ubuntu.com/SecurityTeam/FAQ?_ga=2.242131138.1744859116.1742138161-1500419473.1726851136&_gl=1*161muja*_gcl_au*MzUyMTIzNjI1LjE3MzYyNDQ4NTE.#Contact)