USN-4006-1: Linux kernel vulnerability
Federico Manuel Bento discovered that the Linux kernel did not properly apply Address Space Layout Randomization (ASLR) in some situations for setuid a.out binaries. A local attacker could use this to improve the chances of exploiting an existing vulnerability in a setuid a.out binary. As a hardening measure, this update disables a.out support.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-gketo a version that resolves this vulnerability.Fixed in 4.18.0.1012.12 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-21-lowlatencyto a version that resolves this vulnerability.Fixed in 4.18.0-21.22 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-21-snapdragonto a version that resolves this vulnerability.Fixed in 4.18.0-21.22 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-1017-awsto a version that resolves this vulnerability.Fixed in 4.18.0-1017.19 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 4.18.0.21.22 - Upgrade
Upgrade
ubuntu/linux-image-gcpto a version that resolves this vulnerability.Fixed in 4.18.0.1012.12 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-1012-gcpto a version that resolves this vulnerability.Fixed in 4.18.0-1012.13 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-1013-kvmto a version that resolves this vulnerability.Fixed in 4.18.0-1013.13 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-21-genericto a version that resolves this vulnerability.Fixed in 4.18.0-21.22 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-1015-raspi2to a version that resolves this vulnerability.Fixed in 4.18.0-1015.17 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.18.0.21.22 - Upgrade
Upgrade
ubuntu/linux-image-snapdragonto a version that resolves this vulnerability.Fixed in 4.18.0.21.22 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 4.18.0.1017.17 - Upgrade
Upgrade
ubuntu/linux-image-kvmto a version that resolves this vulnerability.Fixed in 4.18.0.1013.13 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-21-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.18.0-21.22 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 4.18.0.21.22 - Upgrade
Upgrade
ubuntu/linux-image-raspi2to a version that resolves this vulnerability.Fixed in 4.18.0.1015.12 - Configuration
Disable a.out support as a hardening measure.
Linux kernel a.out support = disabled
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is USN-4006-1.
What is the severity of USN-4006-1?
The severity of USN-4006-1 is not mentioned in the provided information.
How does the Linux kernel vulnerability (USN-4006-1) affect Ubuntu 18.10?
The Linux kernel vulnerability (USN-4006-1) affects Ubuntu 18.10 and can be exploited by a local attacker to improve the chances of exploiting an existing vulnerability in a setuid a.out binary.
Is there a fix available for USN-4006-1?
Yes, a fix is available for USN-4006-1. It is recommended to update to version 4.18.0.1012.12 of the linux-image-gke package for Ubuntu 18.10.
Where can I find more information about USN-4006-1?
You can find more information about USN-4006-1 at the following references: [USN-4008-1](https://ubuntu.com/security/notices/USN-4008-1) and [USN-4007-1](https://ubuntu.com/security/notices/USN-4007-1).