USN-3548-2: Linux kernel (HWE) vulnerability Ubuntu Security Notice USN-3548-2 26th January, 2018 linux-hwe, linux-azure, linux-gcp, linux-oem vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.04 LTS Summary The system could be made to crash or run programs as an administrator. Software description linux-azure – Linux kernel for Microsoft Azure Cloud systems linux-gcp – Linux kernel for Google Cloud Platform (GCP) systems linux-hwe – Linux hardware enablement (HWE) kernel linux-oem – Linux kernel for OEM processors Details USN-3548-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.10.This update provides the corresponding updates for the LinuxHardware Enablement (HWE) kernel from Ubuntu 17.10 for Ubuntu16.04 LTS. Jay Vosburgh discovered a logic error in the x86-64 syscall entryimplementation in the Linux kernel, introduced as part of themitigations for the Spectre vulnerability. A local attacker could usethis to cause a [ more… ]