p PatchFirst

USN-3718-1

USN-3718-1 · linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-oem regression

Diese Seite enthält Fakten aus öffentlichen Sicherheitsquellen. Lesen Sie vor dem Aktualisieren die Originalmeldung.

USN-3695-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. Unfortunately, the fix for CVE-2018-1108 introduced a regression where insufficient early entropy prevented services from starting, leading in some situations to a failure to boot, This update addresses the issue. We apologize for the inconvenience. Original advisory details: Jann Horn discovered that the Linux kernel's implementation of random seed data reported that it was in a ready state before it had gathered sufficient entropy. An attacker could use this to expose sensitive information. (CVE-2018-1108) Wen Xu discovered that the ext4 file system implementation in the Linux kernel did not properly initialize the crc32c checksum driver. A local attacker could use this to cause a denial of service (system crash). (CVE-2018-1094) It was discovered that the cdrom driver in the Linux kernel contained an incorrect bounds check. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-10940) Wen Xu discovered that the ext4 file system implementation in the Linux kernel did not properly validate xattr sizes. A local attacker could use this to cause a denial of service (system crash). (CVE-2018-1095) Jann Horn discovered that the 32 bit adjtimex() syscall implementation for 64 bit Linux kernels did not properly initialize memory returned to user space in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-11508) It was discovered that an information leak vulnerability existed in the floppy driver in the Linux kernel. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-7755)

Korrektur verfügbar

Veröffentlicht
Aktualisiert

Technologie-Stack: system

Betroffene Produkte und Versionen

  • linux Ubuntu:18.04:LTS

    Softwareversionen
    • 4.13.0-16.19
    • 4.13.0-17.20
    • 4.13.0-25.29
    • 4.13.0-32.35
    • 4.15.0-10.11
    • 4.15.0-12.13
    • 4.15.0-13.14
    • 4.15.0-15.16
    • 4.15.0-19.20
    • 4.15.0-20.21
    • 4.15.0-22.24
    • 4.15.0-23.25
    • 4.15.0-24.26
    Betroffene Versionsbereiche
    • ECOSYSTEM: < 4.15.0-29.31

    Auf 4.15.0-29.31 aktualisieren

  • linux-aws Ubuntu:18.04:LTS

    Softwareversionen
    • 4.15.0-1001.1
    • 4.15.0-1003.3
    • 4.15.0-1005.5
    • 4.15.0-1006.6
    • 4.15.0-1007.7
    • 4.15.0-1009.9
    • 4.15.0-1010.10
    • 4.15.0-1011.11
    Betroffene Versionsbereiche
    • ECOSYSTEM: < 4.15.0-1016.16

    Auf 4.15.0-1016.16 aktualisieren

  • linux-azure Ubuntu:18.04:LTS

    Softwareversionen
    • 4.15.0-1002.2
    • 4.15.0-1003.3
    • 4.15.0-1004.4
    • 4.15.0-1008.8
    • 4.15.0-1009.9
    • 4.15.0-1012.12
    • 4.15.0-1013.13
    • 4.15.0-1014.14
    Betroffene Versionsbereiche
    • ECOSYSTEM: < 4.15.0-1018.18

    Auf 4.15.0-1018.18 aktualisieren

  • linux-gcp Ubuntu:18.04:LTS

    Softwareversionen
    • 4.15.0-1001.1
    • 4.15.0-1003.3
    • 4.15.0-1005.5
    • 4.15.0-1006.6
    • 4.15.0-1008.8
    • 4.15.0-1009.9
    • 4.15.0-1010.10
    Betroffene Versionsbereiche
    • ECOSYSTEM: < 4.15.0-1014.14

    Auf 4.15.0-1014.14 aktualisieren

  • linux-kvm Ubuntu:18.04:LTS

    Softwareversionen
    • 4.15.0-1002.2
    • 4.15.0-1003.3
    • 4.15.0-1004.4
    • 4.15.0-1006.6
    • 4.15.0-1008.8
    • 4.15.0-1010.10
    • 4.15.0-1011.11
    • 4.15.0-1012.12
    Betroffene Versionsbereiche
    • ECOSYSTEM: < 4.15.0-1016.16

    Auf 4.15.0-1016.16 aktualisieren

  • linux-oem Ubuntu:18.04:LTS

    Softwareversionen
    • 4.15.0-1002.3
    • 4.15.0-1004.5
    • 4.15.0-1006.9
    • 4.15.0-1008.11
    • 4.15.0-1009.12
    Betroffene Versionsbereiche
    • ECOSYSTEM: < 4.15.0-1012.15

    Auf 4.15.0-1012.15 aktualisieren

Originalquellen

Prüfen Sie Ihren Server →