{"id":36204,"date":"2020-04-07T05:15:52","date_gmt":"2020-04-06T20:15:52","guid":{"rendered":"https:\/\/jirak.net\/wp\/usn-4320-1-linux-kernel-vulnerability\/"},"modified":"2020-04-07T06:35:14","modified_gmt":"2020-04-06T21:35:14","slug":"usn-4320-1-linux-kernel-vulnerability","status":"publish","type":"post","link":"https:\/\/jirak.net\/wp\/usn-4320-1-linux-kernel-vulnerability\/","title":{"rendered":"USN-4320-1: Linux kernel vulnerability"},"content":{"rendered":"<p>USN-4320-1: Linux kernel vulnerability<\/p>\n<h2 id=\"linux-linux-aws-linux-kvm-linux-raspi2-linux-snapdragon-vulnerability\">linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerability<\/h2>\n<p>A security issue affects these releases of Ubuntu and its derivatives:<\/p>\n<ul>\n<li>Ubuntu 16.04 LTS<\/li>\n<li>Ubuntu 14.04 ESM<\/li>\n<\/ul>\n<h3 id=\"summary\">Summary<\/h3>\n<p>The system could be made to crash or expose sensitive information.<\/p>\n<h3 id=\"software-description\">Software Description<\/h3>\n<ul>\n<li>linux &#8211; Linux kernel<\/li>\n<li>linux-aws &#8211; Linux kernel for Amazon Web Services (AWS) systems<\/li>\n<li>linux-kvm &#8211; Linux kernel for cloud environments<\/li>\n<li>linux-raspi2 &#8211; Linux kernel for Raspberry Pi 2<\/li>\n<li>linux-snapdragon &#8211; Linux kernel for Snapdragon processors<\/li>\n<li>linux-lts-xenial &#8211; Linux hardware enablement kernel from Xenial for<br \/>\nTrusty<\/li>\n<\/ul>\n<h3 id=\"details\">Details<\/h3>\n<p>Al Viro discovered that the vfs layer in the Linux kernel contained a use-<br \/>\nafter-free vulnerability. A local attacker could use this to cause a denial<br \/>\nof service (system crash) or possibly expose sensitive information (kernel<br \/>\nmemory).<\/p>\n<h2 id=\"update-instructions\">Update instructions<\/h2>\n<p>The problem can be corrected by updating your system to the following package versions:<\/p>\n<dl>\n<dt>Ubuntu 16.04 LTS<\/dt>\n<dd><a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux-kvm\">linux-image-4.4.0-1069-kvm<\/a> &#8211; <a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux-kvm\/4.4.0-1069.76\">4.4.0-1069.76<\/a><\/dd>\n<dd><a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux-aws\">linux-image-4.4.0-1105-aws<\/a> &#8211; <a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux-aws\/4.4.0-1105.116\">4.4.0-1105.116<\/a><\/dd>\n<dd><a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux-raspi2\">linux-image-4.4.0-1131-raspi2<\/a> &#8211; <a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux-raspi2\/4.4.0-1131.140\">4.4.0-1131.140<\/a><\/dd>\n<dd><a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux-snapdragon\">linux-image-4.4.0-1135-snapdragon<\/a> &#8211; <a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux-snapdragon\/4.4.0-1135.143\">4.4.0-1135.143<\/a><\/dd>\n<dd><a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux\">linux-image-4.4.0-177-generic<\/a> &#8211; <a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux\/4.4.0-177.207\">4.4.0-177.207<\/a><\/dd>\n<dd><a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux\">linux-image-4.4.0-177-generic-lpae<\/a> &#8211; <a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux\/4.4.0-177.207\">4.4.0-177.207<\/a><\/dd>\n<dd><a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux\">linux-image-4.4.0-177-lowlatency<\/a> &#8211; <a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux\/4.4.0-177.207\">4.4.0-177.207<\/a><\/dd>\n<dd><a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux\">linux-image-4.4.0-177-powerpc-e500mc<\/a> &#8211; <a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux\/4.4.0-177.207\">4.4.0-177.207<\/a><\/dd>\n<dd><a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux\">linux-image-4.4.0-177-powerpc-smp<\/a> &#8211; <a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux\/4.4.0-177.207\">4.4.0-177.207<\/a><\/dd>\n<dd><a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux\">linux-image-4.4.0-177-powerpc64-emb<\/a> &#8211; <a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux\/4.4.0-177.207\">4.4.0-177.207<\/a><\/dd>\n<dd><a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux\">linux-image-4.4.0-177-powerpc64-smp<\/a> &#8211; <a href=\"https:\/\/launchpad.net\/ubuntu\/+source\/linux\/4.4.0-177.207\">4.4.0-177.207<\/a><\/dd>\n<dd>linux-image-aws &#8211; 4.4.0.1105.109<\/dd>\n<dd>linux-image-generic &#8211; 4.4.0.177.185<\/dd>\n<dd>linux-image-generic-lpae &#8211; 4.4.0.177.185<\/dd>\n<dd>linux-image-kvm &#8211; 4.4.0.1069.69<\/dd>\n<dd>linux-image-lowlatency &#8211; 4.4.0.177.185<\/dd>\n<dd>linux-image-powerpc-e500mc &#8211; 4.4.0.177.185<\/dd>\n<dd>linux-image-powerpc-smp &#8211; 4.4.0.177.185<\/dd>\n<dd>linux-image-powerpc64-emb &#8211; 4.4.0.177.185<\/dd>\n<dd>linux-image-powerpc64-smp &#8211; 4.4.0.177.185<\/dd>\n<dd>linux-image-raspi2 &#8211; 4.4.0.1131.131<\/dd>\n<dd>linux-image-snapdragon &#8211; 4.4.0.1135.127<\/dd>\n<dd>linux-image-virtual &#8211; 4.4.0.177.185<\/dd>\n<dt>Ubuntu 14.04 ESM<\/dt>\n<dd>linux-image-4.4.0-1065-aws &#8211; 4.4.0-1065.69<\/dd>\n<dd>linux-image-4.4.0-177-generic &#8211; 4.4.0-177.207~14.04.1<\/dd>\n<dd>linux-image-4.4.0-177-generic-lpae &#8211; 4.4.0-177.207~14.04.1<\/dd>\n<dd>linux-image-4.4.0-177-lowlatency &#8211; 4.4.0-177.207~14.04.1<\/dd>\n<dd>linux-image-4.4.0-177-powerpc-e500mc &#8211; 4.4.0-177.207~14.04.1<\/dd>\n<dd>linux-image-4.4.0-177-powerpc-smp &#8211; 4.4.0-177.207~14.04.1<\/dd>\n<dd>linux-image-4.4.0-177-powerpc64-emb &#8211; 4.4.0-177.207~14.04.1<\/dd>\n<dd>linux-image-4.4.0-177-powerpc64-smp &#8211; 4.4.0-177.207~14.04.1<\/dd>\n<dd>linux-image-aws &#8211; 4.4.0.1065.66<\/dd>\n<dd>linux-image-generic-lpae-lts-xenial &#8211; 4.4.0.177.156<\/dd>\n<dd>linux-image-generic-lts-xenial &#8211; 4.4.0.177.156<\/dd>\n<dd>linux-image-lowlatency-lts-xenial &#8211; 4.4.0.177.156<\/dd>\n<dd>linux-image-powerpc-e500mc-lts-xenial &#8211; 4.4.0.177.156<\/dd>\n<dd>linux-image-powerpc-smp-lts-xenial &#8211; 4.4.0.177.156<\/dd>\n<dd>linux-image-powerpc64-emb-lts-xenial &#8211; 4.4.0.177.156<\/dd>\n<dd>linux-image-powerpc64-smp-lts-xenial &#8211; 4.4.0.177.156<\/dd>\n<dd>linux-image-virtual-lts-xenial &#8211; 4.4.0.177.156<\/dd>\n<\/dl>\n<p>To update your system, please follow these instructions: <a href=\"https:\/\/wiki.ubuntu.com\/Security\/Upgrades\">https:\/\/wiki.ubuntu.com\/Security\/Upgrades<\/a>.<\/p>\n<p>After a standard system update you need to reboot your computer to make<br \/>\nall the necessary changes.<\/p>\n<p>ATTENTION: Due to an unavoidable ABI change the kernel updates have<br \/>\nbeen given a new version number, which requires you to recompile and<br \/>\nreinstall all third party kernel modules you might have installed.<br \/>\nUnless you manually uninstalled the standard kernel metapackages<br \/>\n(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,<br \/>\nlinux-powerpc), a standard system upgrade will automatically perform<br \/>\nthis as well.<\/p>\n<h2 id=\"references\">References<\/h2>\n<ul>\n<li><a href=\"https:\/\/people.canonical.com\/~ubuntu-security\/cve\/CVE-2020-8428\">CVE-2020-8428<\/a><\/li>\n<\/ul>\n<p>Source: <a href=\"https:\/\/usn.ubuntu.com\/4320-1\/\" target=\"_blank\" rel=\"noopener noreferrer\">USN-4320-1: Linux kernel vulnerability<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<div class=\"mh-excerpt\"><p>USN-4320-1: Linux kernel vulnerability linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerability A security issue affects these releases of Ubuntu and its derivatives: Ubuntu 16.04 LTS Ubuntu 14.04 ESM Summary The system could be made to crash or expose sensitive information. Software Description linux &#8211; Linux kernel linux-aws &#8211; Linux kernel for Amazon Web Services (AWS) systems linux-kvm &#8211; Linux kernel for cloud environments linux-raspi2 &#8211; Linux kernel for Raspberry Pi 2 linux-snapdragon &#8211; Linux kernel for Snapdragon processors linux-lts-xenial &#8211; Linux hardware enablement kernel from Xenial for Trusty Details Al Viro discovered that the vfs layer in the Linux kernel contained a use- after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly expose sensitive information (kernel memory). Update instructions The problem can be corrected by updating your system to the following package <a class=\"mh-excerpt-more\" href=\"https:\/\/jirak.net\/wp\/usn-4320-1-linux-kernel-vulnerability\/\" title=\"USN-4320-1: Linux kernel vulnerability\">[ more&#8230; ]<\/a><\/p>\n<\/div>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[586],"tags":[587],"class_list":["post-36204","post","type-post","status-publish","format-standard","hentry","category-ubuntu-usn","tag-ubuntu-usn"],"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/36204","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/comments?post=36204"}],"version-history":[{"count":1,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/36204\/revisions"}],"predecessor-version":[{"id":36205,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/posts\/36204\/revisions\/36205"}],"wp:attachment":[{"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/media?parent=36204"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/categories?post=36204"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jirak.net\/wp\/wp-json\/wp\/v2\/tags?post=36204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}