It was discovered that the IPsec implementation in the Linux kernel did not properly allocate enough memory when performing ESP transformations, leading to a heap-based buffer overflow. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
{ "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "linux-image-unsigned-4.15.0-175-generic-dbgsym": "4.15.0-175.184~16.04.1", "pcmcia-storage-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "parport-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "linux-buildinfo-4.15.0-175-lowlatency": "4.15.0-175.184~16.04.1", "serial-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "input-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "crypto-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "linux-cloud-tools-4.15.0-175-lowlatency": "4.15.0-175.184~16.04.1", "nic-pcmcia-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "irda-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "nfs-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "virtio-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "linux-image-unsigned-4.15.0-175-generic": "4.15.0-175.184~16.04.1", "sata-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "pata-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "md-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "linux-tools-4.15.0-175-lowlatency": "4.15.0-175.184~16.04.1", "kernel-image-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "scsi-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "linux-headers-4.15.0-175-lowlatency": "4.15.0-175.184~16.04.1", "block-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "linux-hwe-tools-4.15.0-175": "4.15.0-175.184~16.04.1", "ipmi-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "linux-hwe-udebs-generic": "4.15.0-175.184~16.04.1", "multipath-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "linux-modules-4.15.0-175-generic": "4.15.0-175.184~16.04.1", "linux-image-4.15.0-175-generic-dbgsym": "4.15.0-175.184~16.04.1", "message-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "linux-image-unsigned-4.15.0-175-lowlatency-dbgsym": "4.15.0-175.184~16.04.1", "linux-source-4.15.0": "4.15.0-175.184~16.04.1", "usb-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "linux-headers-4.15.0-175-generic": "4.15.0-175.184~16.04.1", "nic-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "fs-core-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "fs-secondary-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "linux-headers-4.15.0-175": "4.15.0-175.184~16.04.1", "plip-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "pcmcia-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "linux-modules-4.15.0-175-lowlatency": "4.15.0-175.184~16.04.1", "mouse-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "ppp-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "vlan-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "nic-shared-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "linux-image-4.15.0-175-generic": "4.15.0-175.184~16.04.1", "dasd-extra-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "nic-usb-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "firewire-core-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "linux-cloud-tools-4.15.0-175-generic": "4.15.0-175.184~16.04.1", "linux-hwe-cloud-tools-4.15.0-175": "4.15.0-175.184~16.04.1", "fat-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "fb-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "linux-buildinfo-4.15.0-175-generic": "4.15.0-175.184~16.04.1", "linux-image-unsigned-4.15.0-175-lowlatency": "4.15.0-175.184~16.04.1", "linux-tools-4.15.0-175-generic": "4.15.0-175.184~16.04.1", "storage-core-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "floppy-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1", "linux-modules-extra-4.15.0-175-generic": "4.15.0-175.184~16.04.1", "dasd-modules-4.15.0-175-generic-di": "4.15.0-175.184~16.04.1" } ] }
{ "availability": "No subscription required", "binaries": [ { "linux-image-unsigned-4.15.0-175-generic-dbgsym": "4.15.0-175.184", "pcmcia-storage-modules-4.15.0-175-generic-di": "4.15.0-175.184", "parport-modules-4.15.0-175-generic-di": "4.15.0-175.184", "plip-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "linux-buildinfo-4.15.0-175-lowlatency": "4.15.0-175.184", "serial-modules-4.15.0-175-generic-di": "4.15.0-175.184", "linux-udebs-generic": "4.15.0-175.184", "input-modules-4.15.0-175-generic-di": "4.15.0-175.184", "crypto-modules-4.15.0-175-generic-di": "4.15.0-175.184", "linux-cloud-tools-4.15.0-175-lowlatency": "4.15.0-175.184", "md-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "irda-modules-4.15.0-175-generic-di": "4.15.0-175.184", "nfs-modules-4.15.0-175-generic-di": "4.15.0-175.184", "virtio-modules-4.15.0-175-generic-di": "4.15.0-175.184", "linux-image-unsigned-4.15.0-175-generic": "4.15.0-175.184", "nic-pcmcia-modules-4.15.0-175-generic-di": "4.15.0-175.184", "linux-image-4.15.0-175-lowlatency": "4.15.0-175.184", "nfs-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "sata-modules-4.15.0-175-generic-di": "4.15.0-175.184", "linux-image-4.15.0-175-generic-lpae-dbgsym": "4.15.0-175.184", "scsi-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "pata-modules-4.15.0-175-generic-di": "4.15.0-175.184", "ipmi-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "md-modules-4.15.0-175-generic-di": "4.15.0-175.184", "fs-secondary-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "linux-tools-4.15.0-175": "4.15.0-175.184", "irda-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "linux-image-4.15.0-175-lowlatency-dbgsym": "4.15.0-175.184", "linux-tools-4.15.0-175-lowlatency": "4.15.0-175.184", "linux-buildinfo-4.15.0-175-generic-lpae": "4.15.0-175.184", "kernel-image-4.15.0-175-generic-di": "4.15.0-175.184", "kernel-image-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "scsi-modules-4.15.0-175-generic-di": "4.15.0-175.184", "linux-headers-4.15.0-175-lowlatency": "4.15.0-175.184", "block-modules-4.15.0-175-generic-di": "4.15.0-175.184", "ipmi-modules-4.15.0-175-generic-di": "4.15.0-175.184", "multipath-modules-4.15.0-175-generic-di": "4.15.0-175.184", "linux-modules-4.15.0-175-generic": "4.15.0-175.184", "linux-modules-4.15.0-175-generic-lpae": "4.15.0-175.184", "linux-image-4.15.0-175-generic-dbgsym": "4.15.0-175.184", "message-modules-4.15.0-175-generic-di": "4.15.0-175.184", "sata-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "linux-image-unsigned-4.15.0-175-lowlatency-dbgsym": "4.15.0-175.184", "parport-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "linux-source-4.15.0": "4.15.0-175.184", "linux-cloud-tools-common": "4.15.0-175.184", "usb-modules-4.15.0-175-generic-di": "4.15.0-175.184", "linux-headers-4.15.0-175-generic": "4.15.0-175.184", "linux-libc-dev": "4.15.0-175.184", "vlan-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "fs-core-modules-4.15.0-175-generic-di": "4.15.0-175.184", "input-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "linux-doc": "4.15.0-175.184", "linux-headers-4.15.0-175": "4.15.0-175.184", "plip-modules-4.15.0-175-generic-di": "4.15.0-175.184", "nic-usb-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "pcmcia-modules-4.15.0-175-generic-di": "4.15.0-175.184", "linux-modules-4.15.0-175-lowlatency": "4.15.0-175.184", "mouse-modules-4.15.0-175-generic-di": "4.15.0-175.184", "multipath-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "fs-secondary-modules-4.15.0-175-generic-di": "4.15.0-175.184", "nic-modules-4.15.0-175-generic-di": "4.15.0-175.184", "ppp-modules-4.15.0-175-generic-di": "4.15.0-175.184", "vlan-modules-4.15.0-175-generic-di": "4.15.0-175.184", "linux-image-4.15.0-175-generic-lpae": "4.15.0-175.184", "nic-shared-modules-4.15.0-175-generic-di": "4.15.0-175.184", "linux-image-4.15.0-175-generic": "4.15.0-175.184", "fat-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "ppp-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "dasd-extra-modules-4.15.0-175-generic-di": "4.15.0-175.184", "fs-core-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "nic-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "linux-tools-host": "4.15.0-175.184", "nic-usb-modules-4.15.0-175-generic-di": "4.15.0-175.184", "firewire-core-modules-4.15.0-175-generic-di": "4.15.0-175.184", "linux-cloud-tools-4.15.0-175-generic": "4.15.0-175.184", "storage-core-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "linux-tools-4.15.0-175-generic-lpae": "4.15.0-175.184", "linux-headers-4.15.0-175-generic-lpae": "4.15.0-175.184", "linux-udebs-generic-lpae": "4.15.0-175.184", "block-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "fat-modules-4.15.0-175-generic-di": "4.15.0-175.184", "fb-modules-4.15.0-175-generic-di": "4.15.0-175.184", "linux-buildinfo-4.15.0-175-generic": "4.15.0-175.184", "linux-image-unsigned-4.15.0-175-lowlatency": "4.15.0-175.184", "usb-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "crypto-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "mouse-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "linux-tools-4.15.0-175-generic": "4.15.0-175.184", "storage-core-modules-4.15.0-175-generic-di": "4.15.0-175.184", "floppy-modules-4.15.0-175-generic-di": "4.15.0-175.184", "linux-tools-common": "4.15.0-175.184", "linux-cloud-tools-4.15.0-175": "4.15.0-175.184", "nic-shared-modules-4.15.0-175-generic-lpae-di": "4.15.0-175.184", "linux-modules-extra-4.15.0-175-generic": "4.15.0-175.184", "dasd-modules-4.15.0-175-generic-di": "4.15.0-175.184" } ] }
{ "availability": "No subscription required", "binaries": [ { "linux-aws-cloud-tools-4.15.0-1126": "4.15.0-1126.135", "linux-modules-4.15.0-1126-aws": "4.15.0-1126.135", "linux-aws-headers-4.15.0-1126": "4.15.0-1126.135", "linux-aws-tools-4.15.0-1126": "4.15.0-1126.135", "linux-tools-4.15.0-1126-aws": "4.15.0-1126.135", "linux-cloud-tools-4.15.0-1126-aws": "4.15.0-1126.135", "linux-modules-extra-4.15.0-1126-aws": "4.15.0-1126.135", "linux-buildinfo-4.15.0-1126-aws": "4.15.0-1126.135", "linux-image-unsigned-4.15.0-1126-aws-dbgsym": "4.15.0-1126.135", "linux-headers-4.15.0-1126-aws": "4.15.0-1126.135", "linux-image-unsigned-4.15.0-1126-aws": "4.15.0-1126.135" } ] }
{ "availability": "No subscription required", "binaries": [ { "linux-azure-4.15-cloud-tools-4.15.0-1136": "4.15.0-1136.149", "linux-cloud-tools-4.15.0-1136-azure": "4.15.0-1136.149", "linux-modules-4.15.0-1136-azure": "4.15.0-1136.149", "linux-tools-4.15.0-1136-azure": "4.15.0-1136.149", "linux-azure-4.15-tools-4.15.0-1136": "4.15.0-1136.149", "linux-headers-4.15.0-1136-azure": "4.15.0-1136.149", "linux-azure-4.15-headers-4.15.0-1136": "4.15.0-1136.149", "linux-image-unsigned-4.15.0-1136-azure": "4.15.0-1136.149", "linux-image-unsigned-4.15.0-1136-azure-dbgsym": "4.15.0-1136.149", "linux-buildinfo-4.15.0-1136-azure": "4.15.0-1136.149", "linux-modules-extra-4.15.0-1136-azure": "4.15.0-1136.149" } ] }
{ "availability": "No subscription required", "binaries": [ { "linux-headers-4.15.0-1040-dell300x": "4.15.0-1040.45", "linux-buildinfo-4.15.0-1040-dell300x": "4.15.0-1040.45", "linux-modules-4.15.0-1040-dell300x": "4.15.0-1040.45", "linux-dell300x-headers-4.15.0-1040": "4.15.0-1040.45", "linux-dell300x-tools-4.15.0-1040": "4.15.0-1040.45", "linux-tools-4.15.0-1040-dell300x": "4.15.0-1040.45", "linux-image-unsigned-4.15.0-1040-dell300x": "4.15.0-1040.45", "linux-image-unsigned-4.15.0-1040-dell300x-dbgsym": "4.15.0-1040.45" } ] }
{ "availability": "No subscription required", "binaries": [ { "linux-buildinfo-4.15.0-1112-kvm": "4.15.0-1112.115", "linux-kvm-tools-4.15.0-1112": "4.15.0-1112.115", "linux-headers-4.15.0-1112-kvm": "4.15.0-1112.115", "linux-tools-4.15.0-1112-kvm": "4.15.0-1112.115", "linux-image-4.15.0-1112-kvm": "4.15.0-1112.115", "linux-image-4.15.0-1112-kvm-dbgsym": "4.15.0-1112.115", "linux-kvm-headers-4.15.0-1112": "4.15.0-1112.115", "linux-modules-4.15.0-1112-kvm": "4.15.0-1112.115" } ] }
{ "availability": "No subscription required", "binaries": [ { "linux-snapdragon-headers-4.15.0-1125": "4.15.0-1125.134", "linux-buildinfo-4.15.0-1125-snapdragon": "4.15.0-1125.134", "linux-tools-4.15.0-1125-snapdragon": "4.15.0-1125.134", "linux-headers-4.15.0-1125-snapdragon": "4.15.0-1125.134", "linux-image-4.15.0-1125-snapdragon-dbgsym": "4.15.0-1125.134", "linux-modules-4.15.0-1125-snapdragon": "4.15.0-1125.134", "linux-image-4.15.0-1125-snapdragon": "4.15.0-1125.134", "linux-snapdragon-tools-4.15.0-1125": "4.15.0-1125.134" } ] }