p PatchFirst

USN-3718-1

USN-3718-1 · linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-oem regression

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

USN-3695-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. Unfortunately, the fix for CVE-2018-1108 introduced a regression where insufficient early entropy prevented services from starting, leading in some situations to a failure to boot, This update addresses the issue. We apologize for the inconvenience. Original advisory details: Jann Horn discovered that the Linux kernel's implementation of random seed data reported that it was in a ready state before it had gathered sufficient entropy. An attacker could use this to expose sensitive information. (CVE-2018-1108) Wen Xu discovered that the ext4 file system implementation in the Linux kernel did not properly initialize the crc32c checksum driver. A local attacker could use this to cause a denial of service (system crash). (CVE-2018-1094) It was discovered that the cdrom driver in the Linux kernel contained an incorrect bounds check. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-10940) Wen Xu discovered that the ext4 file system implementation in the Linux kernel did not properly validate xattr sizes. A local attacker could use this to cause a denial of service (system crash). (CVE-2018-1095) Jann Horn discovered that the 32 bit adjtimex() syscall implementation for 64 bit Linux kernels did not properly initialize memory returned to user space in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-11508) It was discovered that an information leak vulnerability existed in the floppy driver in the Linux kernel. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-7755)

Correctif disponible

Publication
Mise à jour

Pile logicielle: system

Produits et versions concernés

  • linux Ubuntu:18.04:LTS

    Versions du logiciel
    • 4.13.0-16.19
    • 4.13.0-17.20
    • 4.13.0-25.29
    • 4.13.0-32.35
    • 4.15.0-10.11
    • 4.15.0-12.13
    • 4.15.0-13.14
    • 4.15.0-15.16
    • 4.15.0-19.20
    • 4.15.0-20.21
    • 4.15.0-22.24
    • 4.15.0-23.25
    • 4.15.0-24.26
    Plages de versions concernées
    • ECOSYSTEM: < 4.15.0-29.31

    Mettez à jour vers 4.15.0-29.31

  • linux-aws Ubuntu:18.04:LTS

    Versions du logiciel
    • 4.15.0-1001.1
    • 4.15.0-1003.3
    • 4.15.0-1005.5
    • 4.15.0-1006.6
    • 4.15.0-1007.7
    • 4.15.0-1009.9
    • 4.15.0-1010.10
    • 4.15.0-1011.11
    Plages de versions concernées
    • ECOSYSTEM: < 4.15.0-1016.16

    Mettez à jour vers 4.15.0-1016.16

  • linux-azure Ubuntu:18.04:LTS

    Versions du logiciel
    • 4.15.0-1002.2
    • 4.15.0-1003.3
    • 4.15.0-1004.4
    • 4.15.0-1008.8
    • 4.15.0-1009.9
    • 4.15.0-1012.12
    • 4.15.0-1013.13
    • 4.15.0-1014.14
    Plages de versions concernées
    • ECOSYSTEM: < 4.15.0-1018.18

    Mettez à jour vers 4.15.0-1018.18

  • linux-gcp Ubuntu:18.04:LTS

    Versions du logiciel
    • 4.15.0-1001.1
    • 4.15.0-1003.3
    • 4.15.0-1005.5
    • 4.15.0-1006.6
    • 4.15.0-1008.8
    • 4.15.0-1009.9
    • 4.15.0-1010.10
    Plages de versions concernées
    • ECOSYSTEM: < 4.15.0-1014.14

    Mettez à jour vers 4.15.0-1014.14

  • linux-kvm Ubuntu:18.04:LTS

    Versions du logiciel
    • 4.15.0-1002.2
    • 4.15.0-1003.3
    • 4.15.0-1004.4
    • 4.15.0-1006.6
    • 4.15.0-1008.8
    • 4.15.0-1010.10
    • 4.15.0-1011.11
    • 4.15.0-1012.12
    Plages de versions concernées
    • ECOSYSTEM: < 4.15.0-1016.16

    Mettez à jour vers 4.15.0-1016.16

  • linux-oem Ubuntu:18.04:LTS

    Versions du logiciel
    • 4.15.0-1002.3
    • 4.15.0-1004.5
    • 4.15.0-1006.9
    • 4.15.0-1008.11
    • 4.15.0-1009.12
    Plages de versions concernées
    • ECOSYSTEM: < 4.15.0-1012.15

    Mettez à jour vers 4.15.0-1012.15

Sources originales

Vérifiez votre serveur →