USN-4007-2: Linux kernel (HWE) vulnerability

Published Jun 4, 2019

Updated

USN-4007-1 fixed vulnerabilities in the Linux kernel for Ubuntu 18.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 18.04 LTS for Ubuntu 16.04 LTS. Federico Manuel Bento discovered that the Linux kernel did not properly apply Address Space Layout Randomization (ASLR) in some situations for setuid a.out binaries. A local attacker could use this to improve the chances of exploiting an existing vulnerability in a setuid a.out binary. As a hardening measure, this update disables a.out support.

Affected Software

1 affected component

Ubuntu Linux kernel (HWE)

Event History

May 10, 2025

Advisory Published

via Ubuntu·04:08 AM

Data Sourced

via Ubuntu·04:08 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2019-11191

Frequently Asked Questions

What is USN-4007-2?

USN-4007-2 refers to a vulnerability in the Linux kernel for Ubuntu 16.04 LTS that was fixed in the Linux Hardware Enablement (HWE) kernel from Ubuntu 18.04 LTS.

What is the impact of USN-4007-2?

The vulnerability in the Linux kernel can allow an attacker to gain unauthorized access and execute arbitrary code on the affected system.

How can I fix USN-4007-2?

To fix USN-4007-2, you should update your system by installing the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 18.04 LTS.

Is Ubuntu 16.04 LTS affected by USN-4007-2?

Yes, Ubuntu 16.04 LTS is affected by USN-4007-2.

Where can I find more information about USN-4007-2?

You can find more information about USN-4007-2 on the official Ubuntu website.