- Vulnerability/
- USN-3484-2
USN-3484-2: Linux kernel (HWE) vulnerability
First published: Tue Nov 21 2017(Updated: )
USN-3484-1 fixed vulnerabilities in the Linux kernel for Ubuntu 17.04. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.04 for Ubuntu 16.04 LTS. It was discovered that the KVM subsystem in the Linux kernel did not properly keep track of nested levels in guest page tables. A local attacker in a guest VM could use this to cause a denial of service (host OS crash) or possibly execute arbitrary code in the host OS.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-4.10.0-40-generic | <4.10.0-40.44~16.04.1 | 4.10.0-40.44~16.04.1 |
| Ubuntu gir1.2-packagekitglib-1.0 | =16.04 | |
| All of | ||
| ubuntu/linux-image-4.10.0-40-generic-lpae | <4.10.0-40.44~16.04.1 | 4.10.0-40.44~16.04.1 |
| Ubuntu gir1.2-packagekitglib-1.0 | =16.04 | |
| All of | ||
| ubuntu/linux-image-4.10.0-40-lowlatency | <4.10.0-40.44~16.04.1 | 4.10.0-40.44~16.04.1 |
| Ubuntu gir1.2-packagekitglib-1.0 | =16.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2017-12188
- https://ubuntu.com/security/notices/USN-3487-1
- https://ubuntu.com/security/notices/USN-3484-3
- https://ubuntu.com/security/notices/USN-3484-1
- https://ubuntu.com/security/notices/USN-3488-1
- https://launchpad.net/ubuntu/+source/linux-hwe/4.10.0-40.44~16.04.1
- https://ubuntu.com/security/notices/USN-3484-2 (Advisory)
Frequently Asked Questions
What is the severity of USN-3484-2?
The severity of USN-3484-2 is moderate.
How do I fix USN-3484-2?
To fix USN-3484-2, upgrade your Linux kernel to version 4.10.0-40.44~16.04.1 or later.
What is the affected software for USN-3484-2?
The affected software for USN-3484-2 is Ubuntu 16.04 LTS with Linux kernel version 4.10.0-40.44~16.04.1 or earlier.
Where can I find more information about USN-3484-2?
You can find more information about USN-3484-2 at the following references: [CVE-2017-12188](https://ubuntu.com/security/CVE-2017-12188), [USN-3487-1](https://ubuntu.com/security/notices/USN-3487-1), [USN-3484-3](https://ubuntu.com/security/notices/USN-3484-3).
- agent/severity
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/title
- agent/references
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu gir1.2-packagekitglib-1.0
- version/ubuntu gir1.2-packagekitglib-1.0/16.04