USN-3630-2: Linux kernel (HWE) vulnerability

Published Apr 24, 2018

Updated

USN-3630-1 fixed a vulnerability in the Linux kernel for Ubuntu 17.10. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.10 for Ubuntu 16.04 LTS. It was discovered that the Broadcom UniMAC MDIO bus controller driver in the Linux kernel did not properly validate device resources. A local attacker could use this to cause a denial of service (system crash).

Affected Software

1 affected component

Ubuntu Linux kernel (HWE)

Event History

May 22, 2025

Advisory Published

via Ubuntu·04:00 AM

Data Sourced

via Ubuntu·04:00 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2018-8043

Frequently Asked Questions

What is the vulnerability ID for this Linux kernel (HWE) vulnerability?

The vulnerability ID for this Linux kernel (HWE) vulnerability is USN-3630-2.

What is the affected software for this vulnerability?

The affected software for this vulnerability is Ubuntu 16.04 LTS with Linux kernel versions 4.13.0-1013.17, 4.13.0-1024.27, 4.13.0-39.44~16.04.1.

What is the severity of the Linux kernel (HWE) vulnerability?

The severity of the Linux kernel (HWE) vulnerability is not specified.

How do I fix the Linux kernel (HWE) vulnerability?

To fix the Linux kernel (HWE) vulnerability, update the Linux kernel to versions 4.13.0-1013.17, 4.13.0-1024.27, 4.13.0-39.44~16.04.1 or later.

Where can I find more information about the Linux kernel (HWE) vulnerability?

You can find more information about the Linux kernel (HWE) vulnerability on Ubuntu's security website.