USN-3292-1: Linux kernel vulnerability
Jason Donenfeld discovered a heap overflow in the MACsec module in the Linux kernel. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the Linux kernel vulnerability?
The vulnerability ID for the Linux kernel vulnerability is USN-3292-1.
What is the description of the Linux kernel vulnerability?
The Linux kernel vulnerability is a heap overflow in the MACsec module that can be exploited to cause a system crash or execute arbitrary code.
Which Linux kernel versions are affected by the vulnerability?
The Linux kernel versions affected by the vulnerability are 4.8.0.52.64 and 4.8.0-52.55.
How can the Linux kernel vulnerability be fixed?
To fix the Linux kernel vulnerability, update to version 4.8.0.52.64 or 4.8.0-52.55, depending on the installed version.
Where can I find more information about the Linux kernel vulnerability?
You can find more information about the Linux kernel vulnerability at the following references: [CVE-2017-7477](https://ubuntu.com/security/CVE-2017-7477), [USN-3292-2](https://ubuntu.com/security/notices/USN-3292-2), [USN-3293-1](https://ubuntu.com/security/notices/USN-3293-1).