USN-3508-1: Linux kernel vulnerabilities
Mohamed Ghannam discovered that a use-after-free vulnerability existed in the Netlink subsystem (XFRM) in the Linux kernel. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-16939) It was discovered that the Linux kernel did not properly handle copy-on- write of transparent huge pages. A local attacker could use this to cause a denial of service (application crashes) or possibly gain administrative privileges. (CVE-2017-1000405) Yonggang Guo discovered that a race condition existed in the driver subsystem in the Linux kernel. A local attacker could use this to possibly gain administrative privileges. (CVE-2017-12146)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-4.10.0-42-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.10.0-42.46 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.10.0.42.42 - Upgrade
Upgrade
ubuntu/linux-image-4.10.0-42-genericto a version that resolves this vulnerability.Fixed in 4.10.0-42.46 - Upgrade
Upgrade
ubuntu/linux-image-4.10.0-1023-raspi2to a version that resolves this vulnerability.Fixed in 4.10.0-1023.26 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 4.10.0.42.42 - Upgrade
Upgrade
ubuntu/linux-image-4.10.0-42-lowlatencyto a version that resolves this vulnerability.Fixed in 4.10.0-42.46 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 4.10.0.42.42 - Upgrade
Upgrade
ubuntu/linux-image-raspi2to a version that resolves this vulnerability.Fixed in 4.10.0.1023.24
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this USN?
The vulnerability ID for this USN is CVE-2017-16939.
What is the severity of CVE-2017-16939?
The severity of CVE-2017-16939 is high.
How can a local attacker exploit CVE-2017-16939?
A local attacker could exploit CVE-2017-16939 by causing a denial of service (system crash) or possibly executing arbitrary code.
Which versions of Ubuntu are affected by CVE-2017-16939?
CVE-2017-16939 affects Ubuntu 17.04.
How can I fix the CVE-2017-16939 vulnerability?
To fix the CVE-2017-16939 vulnerability, you should update your system to the fixed version of the Linux kernel, which is 4.10.0-42.46.