USN-3209-1: Linux kernel vulnerabilities
It was discovered that the generic SCSI block layer in the Linux kernel did not properly restrict write operations in certain situations. A local attacker could use this to cause a denial of service (system crash) or possibly gain administrative privileges. (CVE-2016-10088) Jim Mattson discovered that the KVM implementation in the Linux kernel mismanages the #BP and #OF exceptions. A local attacker in a guest virtual machine could use this to cause a denial of service (guest OS crash). (CVE-2016-9588) Andrey Konovalov discovered a use-after-free vulnerability in the DCCP implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly gain administrative privileges. (CVE-2017-6074)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-powerpc-smpto a version that resolves this vulnerability.Fixed in 4.8.0.39.50 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-39-genericto a version that resolves this vulnerability.Fixed in 4.8.0-39.42 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-39-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.8.0-39.42 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 4.8.0.39.50 - Upgrade
Upgrade
ubuntu/linux-image-powerpc-e500mcto a version that resolves this vulnerability.Fixed in 4.8.0.39.50 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 4.8.0.39.50 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-39-lowlatencyto a version that resolves this vulnerability.Fixed in 4.8.0-39.42 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-39-powerpc-smpto a version that resolves this vulnerability.Fixed in 4.8.0-39.42 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.8.0.39.50 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-1026-raspi2to a version that resolves this vulnerability.Fixed in 4.8.0-1026.29 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-39-powerpc64-embto a version that resolves this vulnerability.Fixed in 4.8.0-39.42 - Upgrade
Upgrade
ubuntu/linux-image-powerpc64-embto a version that resolves this vulnerability.Fixed in 4.8.0.39.50 - Upgrade
Upgrade
ubuntu/linux-image-raspi2to a version that resolves this vulnerability.Fixed in 4.8.0.1026.29 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-39-powerpc-e500mcto a version that resolves this vulnerability.Fixed in 4.8.0-39.42
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this security advisory?
The vulnerability ID for this security advisory is CVE-2016-10088.
How does the vulnerability in the Linux kernel affect the system?
The vulnerability allows a local attacker to cause a denial of service or possibly gain administrative privileges.
Which version of the Linux kernel is affected by this vulnerability?
The vulnerability affects Linux kernel versions 4.8.0.39.50 and earlier.
How can I fix the vulnerability in the Linux kernel?
To fix the vulnerability, update to Linux kernel version 4.8.0.39.50 or a later version.
Where can I find more information about this vulnerability?
More information about this vulnerability can be found on the Ubuntu website.