Jann Horn discovered that the userfaultd implementation in the Linux kernel did not properly restrict access to certain ioctls. A local attacker could use this possibly to modify files. (CVE-2018-18397)
It was discovered that the crypto subsystem of the Linux kernel leaked uninitialized memory to user space in some situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2018-19854)
Jann Horn discovered a race condition in the fork() system call in the Linux kernel. A local attacker could use this to gain access to services that cache authorizations. (CVE-2019-6133)
{ "availability": "No subscription required", "binaries": [ { "linux-buildinfo-4.15.0-46-snapdragon": "4.15.0-46.49", "linux-image-4.15.0-46-generic-lpae-dbgsym": "4.15.0-46.49", "kernel-image-4.15.0-46-generic-di": "4.15.0-46.49", "linux-buildinfo-4.15.0-46-lowlatency": "4.15.0-46.49", "ppp-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "linux-modules-4.15.0-46-generic": "4.15.0-46.49", "linux-image-4.15.0-46-generic": "4.15.0-46.49", "linux-image-4.15.0-46-snapdragon-dbgsym": "4.15.0-46.49", "parport-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "linux-modules-4.15.0-46-generic-lpae": "4.15.0-46.49", "fs-core-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "sata-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "multipath-modules-4.15.0-46-generic-di": "4.15.0-46.49", "kernel-image-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "irda-modules-4.15.0-46-generic-di": "4.15.0-46.49", "ipmi-modules-4.15.0-46-generic-di": "4.15.0-46.49", "md-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "linux-image-unsigned-4.15.0-46-lowlatency-dbgsym": "4.15.0-46.49", "kernel-image-4.15.0-46-snapdragon-di": "4.15.0-46.49", "multipath-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "ppp-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "crypto-modules-4.15.0-46-generic-di": "4.15.0-46.49", "crypto-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "message-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "storage-core-modules-4.15.0-46-generic-di": "4.15.0-46.49", "vlan-modules-4.15.0-46-generic-di": "4.15.0-46.49", "linux-tools-4.15.0-46-lowlatency": "4.15.0-46.49", "fs-core-modules-4.15.0-46-generic-di": "4.15.0-46.49", "nic-shared-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "scsi-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "linux-image-4.15.0-46-lowlatency": "4.15.0-46.49", "scsi-modules-4.15.0-46-generic-di": "4.15.0-46.49", "fs-core-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "usb-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "usb-modules-4.15.0-46-generic-di": "4.15.0-46.49", "storage-core-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "nfs-modules-4.15.0-46-generic-di": "4.15.0-46.49", "ipmi-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "linux-buildinfo-4.15.0-46-generic-lpae": "4.15.0-46.49", "irda-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "nic-usb-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "virtio-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "fb-modules-4.15.0-46-generic-di": "4.15.0-46.49", "linux-cloud-tools-common": "4.15.0-46.49", "linux-libc-dev": "4.15.0-46.49", "linux-image-4.15.0-46-lowlatency-dbgsym": "4.15.0-46.49", "usb-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "linux-image-4.15.0-46-generic-dbgsym": "4.15.0-46.49", "vlan-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "linux-tools-4.15.0-46-generic-lpae": "4.15.0-46.49", "linux-cloud-tools-4.15.0-46-generic": "4.15.0-46.49", "input-modules-4.15.0-46-generic-di": "4.15.0-46.49", "input-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "firewire-core-modules-4.15.0-46-generic-di": "4.15.0-46.49", "block-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "pcmcia-storage-modules-4.15.0-46-generic-di": "4.15.0-46.49", "pata-modules-4.15.0-46-generic-di": "4.15.0-46.49", "crypto-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "linux-headers-4.15.0-46-generic-lpae": "4.15.0-46.49", "linux-image-unsigned-4.15.0-46-lowlatency": "4.15.0-46.49", "nic-pcmcia-modules-4.15.0-46-generic-di": "4.15.0-46.49", "linux-tools-common": "4.15.0-46.49", "fat-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "linux-udebs-snapdragon": "4.15.0-46.49", "linux-image-unsigned-4.15.0-46-generic-dbgsym": "4.15.0-46.49", "linux-headers-4.15.0-46-generic": "4.15.0-46.49", "parport-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "linux-cloud-tools-4.15.0-46-lowlatency": "4.15.0-46.49", "nic-modules-4.15.0-46-generic-di": "4.15.0-46.49", "plip-modules-4.15.0-46-generic-di": "4.15.0-46.49", "linux-udebs-generic": "4.15.0-46.49", "ipmi-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "irda-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "fs-secondary-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "block-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "fat-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "nic-shared-modules-4.15.0-46-generic-di": "4.15.0-46.49", "sata-modules-4.15.0-46-generic-di": "4.15.0-46.49", "mouse-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "sata-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "linux-headers-4.15.0-46-snapdragon": "4.15.0-46.49", "fs-secondary-modules-4.15.0-46-generic-di": "4.15.0-46.49", "ppp-modules-4.15.0-46-generic-di": "4.15.0-46.49", "scsi-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "pcmcia-modules-4.15.0-46-generic-di": "4.15.0-46.49", "linux-headers-4.15.0-46": "4.15.0-46.49", "linux-buildinfo-4.15.0-46-generic": "4.15.0-46.49", "nfs-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "linux-image-4.15.0-46-snapdragon": "4.15.0-46.49", "mouse-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "multipath-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "md-modules-4.15.0-46-generic-di": "4.15.0-46.49", "nic-usb-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "nic-usb-modules-4.15.0-46-generic-di": "4.15.0-46.49", "linux-cloud-tools-4.15.0-46": "4.15.0-46.49", "linux-headers-4.15.0-46-lowlatency": "4.15.0-46.49", "linux-source-4.15.0": "4.15.0-46.49", "nfs-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "fs-secondary-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "linux-tools-4.15.0-46": "4.15.0-46.49", "floppy-modules-4.15.0-46-generic-di": "4.15.0-46.49", "linux-tools-4.15.0-46-generic": "4.15.0-46.49", "mouse-modules-4.15.0-46-generic-di": "4.15.0-46.49", "linux-modules-extra-4.15.0-46-generic": "4.15.0-46.49", "serial-modules-4.15.0-46-generic-di": "4.15.0-46.49", "linux-image-4.15.0-46-generic-lpae": "4.15.0-46.49", "linux-doc": "4.15.0-46.49", "nic-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "dasd-modules-4.15.0-46-generic-di": "4.15.0-46.49", "md-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "message-modules-4.15.0-46-generic-di": "4.15.0-46.49", "block-modules-4.15.0-46-generic-di": "4.15.0-46.49", "linux-modules-4.15.0-46-lowlatency": "4.15.0-46.49", "linux-tools-4.15.0-46-snapdragon": "4.15.0-46.49", "linux-modules-4.15.0-46-snapdragon": "4.15.0-46.49", "plip-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "linux-tools-host": "4.15.0-46.49", "plip-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "virtio-modules-4.15.0-46-generic-di": "4.15.0-46.49", "input-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "linux-udebs-generic-lpae": "4.15.0-46.49", "storage-core-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "nic-modules-4.15.0-46-generic-lpae-di": "4.15.0-46.49", "linux-image-unsigned-4.15.0-46-generic": "4.15.0-46.49", "nic-shared-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "vlan-modules-4.15.0-46-snapdragon-di": "4.15.0-46.49", "parport-modules-4.15.0-46-generic-di": "4.15.0-46.49", "fat-modules-4.15.0-46-generic-di": "4.15.0-46.49", "dasd-extra-modules-4.15.0-46-generic-di": "4.15.0-46.49" } ] }
{ "availability": "No subscription required", "binaries": [ { "linux-headers-4.15.0-1033-aws": "4.15.0-1033.35", "linux-image-4.15.0-1033-aws-dbgsym": "4.15.0-1033.35", "linux-cloud-tools-4.15.0-1033-aws": "4.15.0-1033.35", "linux-aws-headers-4.15.0-1033": "4.15.0-1033.35", "linux-modules-4.15.0-1033-aws": "4.15.0-1033.35", "linux-tools-4.15.0-1033-aws": "4.15.0-1033.35", "linux-image-4.15.0-1033-aws": "4.15.0-1033.35", "linux-aws-cloud-tools-4.15.0-1033": "4.15.0-1033.35", "linux-buildinfo-4.15.0-1033-aws": "4.15.0-1033.35", "linux-aws-tools-4.15.0-1033": "4.15.0-1033.35" } ] }
{ "availability": "No subscription required", "binaries": [ { "linux-headers-4.15.0-1028-gcp": "4.15.0-1028.29", "linux-buildinfo-4.15.0-1028-gcp": "4.15.0-1028.29", "linux-modules-extra-4.15.0-1028-gcp": "4.15.0-1028.29", "linux-gcp-tools-4.15.0-1028": "4.15.0-1028.29", "linux-image-unsigned-4.15.0-1028-gcp-dbgsym": "4.15.0-1028.29", "linux-modules-4.15.0-1028-gcp": "4.15.0-1028.29", "linux-image-unsigned-4.15.0-1028-gcp": "4.15.0-1028.29", "linux-tools-4.15.0-1028-gcp": "4.15.0-1028.29", "linux-gcp-headers-4.15.0-1028": "4.15.0-1028.29" } ] }
{ "availability": "No subscription required", "binaries": [ { "linux-headers-4.15.0-1030-kvm": "4.15.0-1030.30", "linux-buildinfo-4.15.0-1030-kvm": "4.15.0-1030.30", "linux-image-4.15.0-1030-kvm": "4.15.0-1030.30", "linux-tools-4.15.0-1030-kvm": "4.15.0-1030.30", "linux-kvm-headers-4.15.0-1030": "4.15.0-1030.30", "linux-kvm-tools-4.15.0-1030": "4.15.0-1030.30", "linux-image-4.15.0-1030-kvm-dbgsym": "4.15.0-1030.30", "linux-modules-4.15.0-1030-kvm": "4.15.0-1030.30" } ] }
{ "availability": "No subscription required", "binaries": [ { "nfs-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "pata-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "nic-pcmcia-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "linux-buildinfo-4.15.0-1034-oem": "4.15.0-1034.39", "sata-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "pcmcia-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "irda-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "plip-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "crypto-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "serial-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "virtio-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "message-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "fs-secondary-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "ipmi-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "floppy-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "ppp-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "linux-oem-tools-4.15.0-1034": "4.15.0-1034.39", "usb-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "linux-modules-4.15.0-1034-oem": "4.15.0-1034.39", "scsi-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "linux-oem-headers-4.15.0-1034": "4.15.0-1034.39", "linux-image-unsigned-4.15.0-1034-oem-dbgsym": "4.15.0-1034.39", "firewire-core-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "multipath-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "kernel-image-4.15.0-1034-oem-di": "4.15.0-1034.39", "linux-headers-4.15.0-1034-oem": "4.15.0-1034.39", "vlan-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "fat-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "mouse-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "linux-image-unsigned-4.15.0-1034-oem": "4.15.0-1034.39", "input-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "linux-udebs-oem": "4.15.0-1034.39", "block-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "md-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "pcmcia-storage-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "nic-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "nic-shared-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "nic-usb-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "fs-core-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "parport-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "fb-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "storage-core-modules-4.15.0-1034-oem-di": "4.15.0-1034.39", "linux-tools-4.15.0-1034-oem": "4.15.0-1034.39" } ] }
{ "availability": "No subscription required", "binaries": [ { "linux-buildinfo-4.15.0-1009-oracle": "4.15.0-1009.11", "linux-image-unsigned-4.15.0-1009-oracle": "4.15.0-1009.11", "linux-oracle-tools-4.15.0-1009": "4.15.0-1009.11", "linux-image-unsigned-4.15.0-1009-oracle-dbgsym": "4.15.0-1009.11", "linux-tools-4.15.0-1009-oracle": "4.15.0-1009.11", "linux-headers-4.15.0-1009-oracle": "4.15.0-1009.11", "linux-oracle-headers-4.15.0-1009": "4.15.0-1009.11", "linux-modules-extra-4.15.0-1009-oracle": "4.15.0-1009.11", "linux-modules-4.15.0-1009-oracle": "4.15.0-1009.11" } ] }
{ "availability": "No subscription required", "binaries": [ { "linux-buildinfo-4.15.0-1032-raspi2": "4.15.0-1032.34", "linux-raspi2-headers-4.15.0-1032": "4.15.0-1032.34", "linux-modules-4.15.0-1032-raspi2": "4.15.0-1032.34", "linux-image-4.15.0-1032-raspi2-dbgsym": "4.15.0-1032.34", "linux-tools-4.15.0-1032-raspi2": "4.15.0-1032.34", "linux-image-4.15.0-1032-raspi2": "4.15.0-1032.34", "linux-raspi2-tools-4.15.0-1032": "4.15.0-1032.34", "linux-headers-4.15.0-1032-raspi2": "4.15.0-1032.34" } ] }