USN-3292-1: Linux kernel vulnerability
Jason Donenfeld discovered a heap overflow in the MACsec module in the Linux kernel. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-powerpc-smpto a version that resolves this vulnerability.Fixed in 4.8.0.52.64 - Upgrade
Upgrade
ubuntu/linux-image-powerpc-e500mcto a version that resolves this vulnerability.Fixed in 4.8.0.52.64 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-52-lowlatencyto a version that resolves this vulnerability.Fixed in 4.8.0-52.55 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.8.0.52.64 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-52-genericto a version that resolves this vulnerability.Fixed in 4.8.0-52.55 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-52-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.8.0-52.55 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-52-powerpc64-embto a version that resolves this vulnerability.Fixed in 4.8.0-52.55 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 4.8.0.52.64 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-52-powerpc-e500mcto a version that resolves this vulnerability.Fixed in 4.8.0-52.55 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-1036-raspi2to a version that resolves this vulnerability.Fixed in 4.8.0-1036.39 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 4.8.0.52.64 - Upgrade
Upgrade
ubuntu/linux-image-powerpc64-embto a version that resolves this vulnerability.Fixed in 4.8.0.52.64 - Upgrade
Upgrade
ubuntu/linux-image-raspi2to a version that resolves this vulnerability.Fixed in 4.8.0.1036.40 - Upgrade
Upgrade
ubuntu/linux-image-4.8.0-52-powerpc-smpto a version that resolves this vulnerability.Fixed in 4.8.0-52.55
Event History
Frequently Asked Questions
What is the vulnerability ID for the Linux kernel vulnerability?
The vulnerability ID for the Linux kernel vulnerability is USN-3292-1.
What is the description of the Linux kernel vulnerability?
The Linux kernel vulnerability is a heap overflow in the MACsec module that can be exploited to cause a system crash or execute arbitrary code.
Which Linux kernel versions are affected by the vulnerability?
The Linux kernel versions affected by the vulnerability are 4.8.0.52.64 and 4.8.0-52.55.
How can the Linux kernel vulnerability be fixed?
To fix the Linux kernel vulnerability, update to version 4.8.0.52.64 or 4.8.0-52.55, depending on the installed version.
Where can I find more information about the Linux kernel vulnerability?
You can find more information about the Linux kernel vulnerability at the following references: [CVE-2017-7477](https://ubuntu.com/security/CVE-2017-7477), [USN-3292-2](https://ubuntu.com/security/notices/USN-3292-2), [USN-3293-1](https://ubuntu.com/security/notices/USN-3293-1).