USN-3507-1: Linux kernel vulnerabilities
First published: Thu Dec 07 2017(Updated: )
Mohamed Ghannam discovered that a use-after-free vulnerability existed in the Netlink subsystem (XFRM) in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-16939) It was discovered that the Linux kernel did not properly handle copy-on- write of transparent huge pages. A local attacker could use this to cause a denial of service (application crashes) or possibly gain administrative privileges. (CVE-2017-1000405) Fan Wu, Haoran Qiu, and Shixiong Zhao discovered that the associative array implementation in the Linux kernel sometimes did not properly handle adding a new entry. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-12193) Eric Biggers discovered that the key management subsystem in the Linux kernel did not properly restrict adding a key that already exists but is uninstantiated. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-15299) It was discovered that a null pointer dereference error existed in the PowerPC KVM implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-15306) Eric Biggers discovered a race condition in the key management subsystem of the Linux kernel around keys in a negative state. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-15951) Andrey Konovalov discovered that the USB subsystem in the Linux kernel did not properly validate USB BOS metadata. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2017-16535) Andrey Konovalov discovered an out-of-bounds read in the GTCO digitizer USB driver for the Linux kernel. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-16643)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-4.13.0-19-generic | <4.13.0-19.22 | 4.13.0-19.22 |
| Ubuntu gir1.2-packagekitglib-1.0 | =17.10 | |
| All of | ||
| ubuntu/linux-image-4.13.0-19-generic-lpae | <4.13.0-19.22 | 4.13.0-19.22 |
| Ubuntu gir1.2-packagekitglib-1.0 | =17.10 | |
| All of | ||
| ubuntu/linux-image-generic-lpae | <4.13.0.19.20 | 4.13.0.19.20 |
| Ubuntu gir1.2-packagekitglib-1.0 | =17.10 | |
| All of | ||
| ubuntu/linux-image-4.13.0-19-lowlatency | <4.13.0-19.22 | 4.13.0-19.22 |
| Ubuntu gir1.2-packagekitglib-1.0 | =17.10 | |
| All of | ||
| ubuntu/linux-image-generic | <4.13.0.19.20 | 4.13.0.19.20 |
| Ubuntu gir1.2-packagekitglib-1.0 | =17.10 | |
| All of | ||
| ubuntu/linux-image-4.13.0-1008-raspi2 | <4.13.0-1008.8 | 4.13.0-1008.8 |
| Ubuntu gir1.2-packagekitglib-1.0 | =17.10 | |
| All of | ||
| ubuntu/linux-image-lowlatency | <4.13.0.19.20 | 4.13.0.19.20 |
| Ubuntu gir1.2-packagekitglib-1.0 | =17.10 | |
| All of | ||
| ubuntu/linux-image-raspi2 | <4.13.0.1008.6 | 4.13.0.1008.6 |
| Ubuntu gir1.2-packagekitglib-1.0 | =17.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2017-1000405
- https://ubuntu.com/security/CVE-2017-12193
- https://ubuntu.com/security/CVE-2017-15299
- https://ubuntu.com/security/CVE-2017-15306
- https://ubuntu.com/security/CVE-2017-15951
- https://ubuntu.com/security/CVE-2017-16535
- https://ubuntu.com/security/CVE-2017-16643
- https://ubuntu.com/security/CVE-2017-16939
- https://ubuntu.com/security/notices/USN-3510-1
- https://ubuntu.com/security/notices/USN-3510-2
- https://ubuntu.com/security/notices/USN-3511-1
- https://ubuntu.com/security/notices/USN-3508-2
- https://ubuntu.com/security/notices/USN-3507-2
- https://ubuntu.com/security/notices/USN-3509-1
- https://ubuntu.com/security/notices/USN-3509-2
- https://ubuntu.com/security/notices/USN-3508-1
- https://ubuntu.com/security/notices/USN-3698-2
- https://ubuntu.com/security/notices/USN-3698-1
- https://ubuntu.com/security/notices/USN-3798-1
- https://ubuntu.com/security/notices/USN-3798-2
- https://ubuntu.com/security/notices/USN-3485-1
- https://ubuntu.com/security/notices/USN-3485-3
- https://ubuntu.com/security/notices/USN-3485-2
- https://ubuntu.com/security/notices/USN-3754-1
- https://launchpad.net/ubuntu/+source/linux/4.13.0-19.22
- https://launchpad.net/ubuntu/+source/linux-raspi2/4.13.0-1008.8
- https://ubuntu.com/security/notices/USN-3507-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the severity of USN-3507-1?
The severity of USN-3507-1 is high.
How does the use-after-free vulnerability (CVE-2017-16939) in the Linux kernel affect me?
The use-after-free vulnerability in the Linux kernel (CVE-2017-16939) can allow a local attacker to cause a denial of service or execute arbitrary code.
How do I fix the use-after-free vulnerability (CVE-2017-16939) in the Linux kernel?
To fix the use-after-free vulnerability in the Linux kernel (CVE-2017-16939), update to version 4.13.0-19.22 or later.
What other vulnerabilities are addressed in USN-3507-1?
USN-3507-1 also addresses CVE-2017-1000405, CVE-2017-12193, and CVE-2017-15299.
Where can I find more information about USN-3507-1?
You can find more information about USN-3507-1 at the following link: [link]
- agent/severity
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/title
- agent/references
- agent/weakness
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu gir1.2-packagekitglib-1.0
- version/ubuntu gir1.2-packagekitglib-1.0/17.10