USN-3264-2: Linux kernel (Trusty HWE) vulnerability
First published: Mon Apr 24 2017(Updated: )
USN-3264-1 fixed vulnerabilities in the Linux kernel for Ubuntu 14.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 14.04 LTS for Ubuntu 12.04 LTS. Alexander Popov discovered that a race condition existed in the Stream Control Transmission Protocol (SCTP) implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash).
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-3.13.0-117-generic | <3.13.0-117.164~precise1 | 3.13.0-117.164~precise1 |
| Ubuntu gir1.2-packagekitglib-1.0 | =12.04 | |
| All of | ||
| ubuntu/linux-image-3.13.0-117-generic-lpae | <3.13.0-117.164~precise1 | 3.13.0-117.164~precise1 |
| Ubuntu gir1.2-packagekitglib-1.0 | =12.04 | |
| All of | ||
| ubuntu/linux-image-generic-lpae-lts-trusty | <3.13.0.117.108 | 3.13.0.117.108 |
| Ubuntu gir1.2-packagekitglib-1.0 | =12.04 | |
| All of | ||
| ubuntu/linux-image-generic-lts-trusty | <3.13.0.117.108 | 3.13.0.117.108 |
| Ubuntu gir1.2-packagekitglib-1.0 | =12.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2017-5986
- https://ubuntu.com/security/notices/USN-3264-1
- https://ubuntu.com/security/notices/USN-3266-1
- https://ubuntu.com/security/notices/USN-3266-2
- https://ubuntu.com/security/notices/USN-3265-1
- https://ubuntu.com/security/notices/USN-3265-2
- https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-117.164~precise1
- https://ubuntu.com/security/notices/USN-3264-2 (Advisory)
Frequently Asked Questions
What is the vulnerability ID for this Linux kernel vulnerability?
The vulnerability ID for this Linux kernel vulnerability is USN-3264-2.
What is the severity of USN-3264-2?
Please refer to the reference links provided for more information on the severity of USN-3264-2.
How do I fix USN-3264-2?
To fix USN-3264-2, update your Linux kernel to the recommended version mentioned in the reference links.
What is the affected software for USN-3264-2?
The affected software for USN-3264-2 is Ubuntu 12.04 LTS with specific Linux kernel versions.
Where can I find more information about USN-3264-2?
You can find more information about USN-3264-2 in the reference links provided.
- agent/severity
- agent/references
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/title
- agent/weakness
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu gir1.2-packagekitglib-1.0
- version/ubuntu gir1.2-packagekitglib-1.0/12.04