First published: Tue Jun 04 2019(Updated: )
It was discovered that a null pointer dereference vulnerability existed in the LSI Logic MegaRAID driver in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2019-11810) It was discovered that a race condition leading to a use-after-free existed in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel. The RDS protocol is disabled via blocklist by default in Ubuntu. If enabled, a local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2019-11815)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-5.0.0-1007-aws | <5.0.0-1007.7 | 5.0.0-1007.7 |
=19.04 | ||
All of | ||
ubuntu/linux-image-5.0.0-1007-gcp | <5.0.0-1007.7 | 5.0.0-1007.7 |
=19.04 | ||
All of | ||
ubuntu/linux-image-5.0.0-1007-kvm | <5.0.0-1007.7 | 5.0.0-1007.7 |
=19.04 | ||
All of | ||
ubuntu/linux-image-5.0.0-1009-raspi2 | <5.0.0-1009.9 | 5.0.0-1009.9 |
=19.04 | ||
All of | ||
ubuntu/linux-image-5.0.0-1013-snapdragon | <5.0.0-1013.13 | 5.0.0-1013.13 |
=19.04 | ||
All of | ||
ubuntu/linux-image-5.0.0-16-generic | <5.0.0-16.17 | 5.0.0-16.17 |
=19.04 | ||
All of | ||
ubuntu/linux-image-5.0.0-16-generic-lpae | <5.0.0-16.17 | 5.0.0-16.17 |
=19.04 | ||
All of | ||
ubuntu/linux-image-5.0.0-16-lowlatency | <5.0.0-16.17 | 5.0.0-16.17 |
=19.04 | ||
All of | ||
ubuntu/linux-image-aws | <5.0.0.1007.7 | 5.0.0.1007.7 |
=19.04 | ||
All of | ||
ubuntu/linux-image-gcp | <5.0.0.1007.7 | 5.0.0.1007.7 |
=19.04 | ||
All of | ||
ubuntu/linux-image-generic | <5.0.0.16.17 | 5.0.0.16.17 |
=19.04 | ||
All of | ||
ubuntu/linux-image-generic-lpae | <5.0.0.16.17 | 5.0.0.16.17 |
=19.04 | ||
All of | ||
ubuntu/linux-image-gke | <5.0.0.1007.7 | 5.0.0.1007.7 |
=19.04 | ||
All of | ||
ubuntu/linux-image-kvm | <5.0.0.1007.7 | 5.0.0.1007.7 |
=19.04 | ||
All of | ||
ubuntu/linux-image-lowlatency | <5.0.0.16.17 | 5.0.0.16.17 |
=19.04 | ||
All of | ||
ubuntu/linux-image-raspi2 | <5.0.0.1009.6 | 5.0.0.1009.6 |
=19.04 | ||
All of | ||
ubuntu/linux-image-snapdragon | <5.0.0.1013.6 | 5.0.0.1013.6 |
=19.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID of this advisory is USN-4005-1.
The severity of the vulnerability is not specified in the advisory.
Linux kernel versions 5.0.0-1007.7 and below are affected by this vulnerability.
A local attacker can exploit this vulnerability to cause a denial of service (system crash).
To fix this vulnerability, update your Linux kernel to version 5.0.0-1007.7 or later.