USN-3903-2: Linux kernel (HWE) vulnerabilities<\/p>\n
A security issue affects these releases of Ubuntu and its derivatives:<\/p>\n
Several security issues were fixed in the Linux kernel.<\/p>\n
USN-3903-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.10.
\nThis update provides the corresponding updates for the Linux Hardware
\nEnablement (HWE) kernel from Ubuntu 18.10 for Ubuntu 18.04 LTS.<\/p>\n
Jason Wang discovered that the vhost net driver in the Linux kernel
\ncontained an out of bounds write vulnerability. An attacker in a guest
\nvirtual machine could use this to cause a denial of service (host system
\ncrash) or possibly execute arbitrary code in the host kernel.
\n(CVE-2018-16880)<\/p>\n
Jann Horn discovered that the userfaultd implementation in the Linux kernel
\ndid not properly restrict access to certain ioctls. A local attacker could
\nuse this possibly to modify files. (CVE-2018-18397)<\/p>\n
Jann Horn discovered a race condition in the fork() system call in the
\nLinux kernel. A local attacker could use this to gain access to services
\nthat cache authorizations. (CVE-2019-6133)<\/p>\n
The problem can be corrected by updating your system to the following package versions:<\/p>\n
To update your system, please follow these instructions: https:\/\/wiki.ubuntu.com\/Security\/Upgrades<\/a>.<\/p>\n After a standard system update you need to reboot your computer to make ATTENTION: Due to an unavoidable ABI change the kernel updates have Source: USN-3903-2: Linux kernel (HWE) vulnerabilities<\/a><\/p>\n","protected":false},"excerpt":{"rendered":" USN-3903-2: Linux kernel (HWE) vulnerabilities linux-hwe, linux-azure vulnerabilities A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 18.04 LTS Summary Several security issues were fixed in the Linux kernel. Software Description linux-azure – Linux kernel for Microsoft Azure Cloud systems linux-hwe – Linux hardware enablement (HWE) kernel Details USN-3903-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.10. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 18.10 for Ubuntu 18.04 LTS. Jason Wang discovered that the vhost net driver in the Linux kernel contained an out of bounds write vulnerability. An attacker in a guest virtual machine could use this to cause a denial of service (host system crash) or possibly execute arbitrary code in the host kernel. (CVE-2018-16880) Jann Horn discovered that the userfaultd implementation in the Linux kernel [ more… ]<\/a><\/p>\n<\/div>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[586],"tags":[587],"class_list":["post-29759","post","type-post","status-publish","format-standard","hentry","category-ubuntu-usn","tag-ubuntu-usn"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/29759","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/comments?post=29759"}],"version-history":[{"count":1,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/29759\/revisions"}],"predecessor-version":[{"id":29760,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/29759\/revisions\/29760"}],"wp:attachment":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/media?parent=29759"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/categories?post=29759"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/tags?post=29759"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\nall the necessary changes.<\/p>\n
\nbeen given a new version number, which requires you to recompile and
\nreinstall all third party kernel modules you might have installed.
\nUnless you manually uninstalled the standard kernel metapackages
\n(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
\nlinux-powerpc), a standard system upgrade will automatically perform
\nthis as well.<\/p>\nReferences<\/h2>\n
\n