USN-3523-2

See a problem?

Source

https://ubuntu.com/security/notices/USN-3523-2

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-3523-2.json

JSON Data

https://api.osv.dev/v1/vulns/USN-3523-2

Related

CVE-2017-16995
CVE-2017-17862
CVE-2017-17863
CVE-2017-17864
CVE-2017-5754
UBUNTU-CVE-2017-16995
UBUNTU-CVE-2017-17862
UBUNTU-CVE-2017-17863
UBUNTU-CVE-2017-17864
UBUNTU-CVE-2017-5754

Published

2018-01-10T13:19:19.418157Z

Modified

2018-01-10T13:19:19.418157Z

Summary

linux-hwe, linux-azure, linux-gcp, linux-oem vulnerabilities

Details

USN-3523-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.10. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.10 for Ubuntu 16.04 LTS.

Jann Horn discovered that microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized memory reads via sidechannel attacks. This flaw is known as Meltdown. A local attacker could use this to expose sensitive information, including kernel memory. (CVE-2017-5754)

Jann Horn discovered that the Berkeley Packet Filter (BPF) implementation in the Linux kernel did not properly check the relationship between pointer values and the BPF stack. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-17863)

Jann Horn discovered that the Berkeley Packet Filter (BPF) implementation in the Linux kernel improperly performed sign extension in some situations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-16995)

Alexei Starovoitov discovered that the Berkeley Packet Filter (BPF) implementation in the Linux kernel contained a branch-pruning logic issue around unreachable code. A local attacker could use this to cause a denial of service. (CVE-2017-17862)

Jann Horn discovered that the Berkeley Packet Filter (BPF) implementation in the Linux kernel mishandled pointer data values in some situations. A local attacker could use this to to expose sensitive information (kernel memory). (CVE-2017-17864)

References

Affected packages

Ubuntu:16.04:LTS / linux-azure

Package

Name: linux-azure
Purl: pkg:deb/ubuntu/linux-azure@4.13.0-1005.7?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.13.0-1005.7

Affected versions

4.*

4.11.0-1009.9

4.11.0-1011.11

4.11.0-1013.13

4.11.0-1014.14

4.11.0-1015.15

4.11.0-1016.16

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "linux-azure-tools-4.13.0-1005": "4.13.0-1005.7",
            "linux-azure-cloud-tools-4.13.0-1005-dbgsym": "4.13.0-1005.7",
            "linux-azure-headers-4.13.0-1005": "4.13.0-1005.7",
            "linux-headers-4.13.0-1005-azure": "4.13.0-1005.7",
            "linux-image-4.13.0-1005-azure": "4.13.0-1005.7",
            "linux-cloud-tools-4.13.0-1005-azure": "4.13.0-1005.7",
            "linux-image-4.13.0-1005-azure-dbgsym": "4.13.0-1005.7",
            "linux-azure-cloud-tools-4.13.0-1005": "4.13.0-1005.7",
            "linux-tools-4.13.0-1005-azure": "4.13.0-1005.7",
            "linux-image-extra-4.13.0-1005-azure": "4.13.0-1005.7",
            "linux-azure-tools-4.13.0-1005-dbgsym": "4.13.0-1005.7"
        }
    ]
}

Ubuntu:16.04:LTS / linux-gcp

Package

Name: linux-gcp
Purl: pkg:deb/ubuntu/linux-gcp@4.13.0-1006.9?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.13.0-1006.9

Affected versions

4.*

4.10.0-1004.4

4.10.0-1006.6

4.10.0-1007.7

4.10.0-1008.8

4.10.0-1009.9

4.13.0-1002.5

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "linux-cloud-tools-4.13.0-1006-gcp": "4.13.0-1006.9",
            "linux-gcp-cloud-tools-4.13.0-1006-dbgsym": "4.13.0-1006.9",
            "linux-headers-4.13.0-1006-gcp": "4.13.0-1006.9",
            "linux-gcp-tools-4.13.0-1006": "4.13.0-1006.9",
            "linux-image-4.13.0-1006-gcp-dbgsym": "4.13.0-1006.9",
            "linux-gcp-tools-4.13.0-1006-dbgsym": "4.13.0-1006.9",
            "linux-image-4.13.0-1006-gcp": "4.13.0-1006.9",
            "linux-gcp-headers-4.13.0-1006": "4.13.0-1006.9",
            "linux-tools-4.13.0-1006-gcp": "4.13.0-1006.9",
            "linux-gcp-cloud-tools-4.13.0-1006": "4.13.0-1006.9",
            "linux-image-extra-4.13.0-1006-gcp": "4.13.0-1006.9"
        }
    ]
}

Ubuntu:16.04:LTS / linux-hwe

Package

Name: linux-hwe
Purl: pkg:deb/ubuntu/linux-hwe@4.13.0-26.29~16.04.2?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.13.0-26.29~16.04.2

Affected versions

4.*

4.8.0-36.36~16.04.1

4.8.0-39.42~16.04.1

4.8.0-41.44~16.04.1

4.8.0-42.45~16.04.1

4.8.0-44.47~16.04.1

4.8.0-45.48~16.04.1

4.8.0-46.49~16.04.1

4.8.0-49.52~16.04.1

4.8.0-51.54~16.04.1

4.8.0-52.55~16.04.1

4.8.0-53.56~16.04.1

4.8.0-54.57~16.04.1

4.8.0-56.61~16.04.1

4.8.0-58.63~16.04.1

4.10.0-27.30~16.04.2

4.10.0-28.32~16.04.2

4.10.0-30.34~16.04.1

4.10.0-32.36~16.04.1

4.10.0-33.37~16.04.1

4.10.0-35.39~16.04.1

4.10.0-37.41~16.04.1

4.10.0-38.42~16.04.1

4.10.0-40.44~16.04.1

4.10.0-42.46~16.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "irda-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "nfs-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "dasd-extra-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "fs-core-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "nic-usb-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "linux-image-4.13.0-26-generic": "4.13.0-26.29~16.04.2",
            "parport-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "fb-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "parport-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "linux-hwe-udebs-generic-lpae": "4.13.0-26.29~16.04.2",
            "multipath-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "ipmi-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "fs-core-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "linux-source-4.13.0": "4.13.0-26.29~16.04.2",
            "linux-hwe-tools-4.13.0-26": "4.13.0-26.29~16.04.2",
            "crypto-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "kernel-image-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "ppp-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "nic-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "input-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "fs-secondary-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "fs-secondary-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "pcmcia-storage-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "floppy-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "mouse-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "linux-image-4.13.0-26-generic-lpae-dbgsym": "4.13.0-26.29~16.04.2",
            "nic-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "vlan-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "vlan-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "scsi-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "linux-cloud-tools-4.13.0-26-generic": "4.13.0-26.29~16.04.2",
            "linux-hwe-udebs-generic": "4.13.0-26.29~16.04.2",
            "linux-hwe-cloud-tools-4.13.0-26-dbgsym": "4.13.0-26.29~16.04.2",
            "sata-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "serial-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "message-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "pcmcia-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "nic-shared-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "md-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "multipath-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "linux-hwe-tools-4.13.0-26-dbgsym": "4.13.0-26.29~16.04.2",
            "linux-tools-4.13.0-26-lowlatency": "4.13.0-26.29~16.04.2",
            "block-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "usb-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "linux-tools-4.13.0-26-generic": "4.13.0-26.29~16.04.2",
            "input-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "nic-shared-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "sata-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "storage-core-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "nic-pcmcia-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "linux-headers-4.13.0-26-generic": "4.13.0-26.29~16.04.2",
            "pata-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "mouse-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "linux-image-4.13.0-26-lowlatency": "4.13.0-26.29~16.04.2",
            "nfs-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "linux-image-extra-4.13.0-26-generic": "4.13.0-26.29~16.04.2",
            "ipmi-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "storage-core-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "fat-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "virtio-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "linux-headers-4.13.0-26-lowlatency": "4.13.0-26.29~16.04.2",
            "plip-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "fat-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "linux-image-4.13.0-26-lowlatency-dbgsym": "4.13.0-26.29~16.04.2",
            "firewire-core-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "dasd-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "usb-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "linux-cloud-tools-4.13.0-26-lowlatency": "4.13.0-26.29~16.04.2",
            "plip-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "linux-hwe-cloud-tools-4.13.0-26": "4.13.0-26.29~16.04.2",
            "block-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "md-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "linux-image-4.13.0-26-generic-dbgsym": "4.13.0-26.29~16.04.2",
            "linux-image-4.13.0-26-generic-lpae": "4.13.0-26.29~16.04.2",
            "nic-usb-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "scsi-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "crypto-modules-4.13.0-26-generic-lpae-di": "4.13.0-26.29~16.04.2",
            "linux-headers-4.13.0-26-generic-lpae": "4.13.0-26.29~16.04.2",
            "kernel-image-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "linux-tools-4.13.0-26-generic-lpae": "4.13.0-26.29~16.04.2",
            "linux-headers-4.13.0-26": "4.13.0-26.29~16.04.2",
            "irda-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2",
            "ppp-modules-4.13.0-26-generic-di": "4.13.0-26.29~16.04.2"
        }
    ]
}

Ubuntu:16.04:LTS / linux-oem

Package

Name: linux-oem
Purl: pkg:deb/ubuntu/linux-oem@4.13.0-1015.16?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

4.13.0-1015.16

Affected versions

4.*

4.13.0-1008.9

4.13.0-1010.11

4.13.0-1012.13

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "sata-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "irda-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "fs-secondary-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "fb-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "ppp-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "multipath-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "scsi-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "nfs-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "vlan-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "fat-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "message-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "usb-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "floppy-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "linux-tools-4.13.0-1015-oem": "4.13.0-1015.16",
            "nic-usb-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "serial-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "input-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "linux-oem-headers-4.13.0-1015": "4.13.0-1015.16",
            "mouse-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "plip-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "linux-oem-tools-4.13.0-1015": "4.13.0-1015.16",
            "ipmi-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "storage-core-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "parport-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "pata-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "block-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "linux-image-4.13.0-1015-oem-dbgsym": "4.13.0-1015.16",
            "md-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "kernel-image-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "linux-udebs-oem": "4.13.0-1015.16",
            "linux-image-4.13.0-1015-oem": "4.13.0-1015.16",
            "virtio-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "linux-oem-tools-4.13.0-1015-dbgsym": "4.13.0-1015.16",
            "pcmcia-storage-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "fs-core-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "linux-headers-4.13.0-1015-oem": "4.13.0-1015.16",
            "crypto-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "firewire-core-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "nic-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "pcmcia-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "nic-pcmcia-modules-4.13.0-1015-oem-di": "4.13.0-1015.16",
            "nic-shared-modules-4.13.0-1015-oem-di": "4.13.0-1015.16"
        }
    ]
}