USN-4041-1: Linux kernel update
USN-4017-1 fixed vulnerabilities in the Linux kernel for Ubuntu. Unfortunately, the update introduced a regression that interfered with networking applications that setup very low SOSNDBUF values. This update fixes the problem. We apologize for the inconvenience. Jonathan Looney discovered that the Linux kernel could be coerced into segmenting responses into multiple TCP segments. A remote attacker could construct an ongoing sequence of requests to cause a denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-5.0.0-1010-awsto a version that resolves this vulnerability.Fixed in 5.0.0-1010.11 - Upgrade
Upgrade
ubuntu/linux-image-5.0.0-1010-azureto a version that resolves this vulnerability.Fixed in 5.0.0-1010.10 - Upgrade
Upgrade
ubuntu/linux-image-5.0.0-1010-gcpto a version that resolves this vulnerability.Fixed in 5.0.0-1010.10 - Upgrade
Upgrade
ubuntu/linux-image-5.0.0-1010-kvmto a version that resolves this vulnerability.Fixed in 5.0.0-1010.11 - Upgrade
Upgrade
ubuntu/linux-image-5.0.0-1012-raspi2to a version that resolves this vulnerability.Fixed in 5.0.0-1012.12 - Upgrade
Upgrade
ubuntu/linux-image-5.0.0-1016-snapdragonto a version that resolves this vulnerability.Fixed in 5.0.0-1016.17 - Upgrade
Upgrade
ubuntu/linux-image-5.0.0-20-genericto a version that resolves this vulnerability.Fixed in 5.0.0-20.21 - Upgrade
Upgrade
ubuntu/linux-image-5.0.0-20-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.0.0-20.21 - Upgrade
Upgrade
ubuntu/linux-image-5.0.0-20-lowlatencyto a version that resolves this vulnerability.Fixed in 5.0.0-20.21 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 5.0.0.1010.10 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 5.0.0.1010.9 - Upgrade
Upgrade
ubuntu/linux-image-gcpto a version that resolves this vulnerability.Fixed in 5.0.0.1010.10 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 5.0.0.20.21 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.0.0.20.21 - Upgrade
Upgrade
ubuntu/linux-image-gketo a version that resolves this vulnerability.Fixed in 5.0.0.1010.10 - Upgrade
Upgrade
ubuntu/linux-image-kvmto a version that resolves this vulnerability.Fixed in 5.0.0.1010.10 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 5.0.0.20.21 - Upgrade
Upgrade
ubuntu/linux-image-raspi2to a version that resolves this vulnerability.Fixed in 5.0.0.1012.9 - Upgrade
Upgrade
ubuntu/linux-image-snapdragonto a version that resolves this vulnerability.Fixed in 5.0.0.1016.9 - Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 5.0.0.20.21 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-1015-gcpto a version that resolves this vulnerability.Fixed in 4.18.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-1016-kvmto a version that resolves this vulnerability.Fixed in 4.18.0-1016.17 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-1018-raspi2to a version that resolves this vulnerability.Fixed in 4.18.0-1018.21 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-1020-awsto a version that resolves this vulnerability.Fixed in 4.18.0-1020.24 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-1023-azureto a version that resolves this vulnerability.Fixed in 4.18.0-1023.24 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-25-genericto a version that resolves this vulnerability.Fixed in 4.18.0-25.26 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-25-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.18.0-25.26 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-25-lowlatencyto a version that resolves this vulnerability.Fixed in 4.18.0-25.26 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-25-snapdragonto a version that resolves this vulnerability.Fixed in 4.18.0-25.26 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 4.18.0.1020.20 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 4.18.0.1023.25 - Upgrade
Upgrade
ubuntu/linux-image-gcpto a version that resolves this vulnerability.Fixed in 4.18.0.1015.15 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 4.18.0.25.26 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.18.0.25.26 - Upgrade
Upgrade
ubuntu/linux-image-gketo a version that resolves this vulnerability.Fixed in 4.18.0.1015.15 - Upgrade
Upgrade
ubuntu/linux-image-kvmto a version that resolves this vulnerability.Fixed in 4.18.0.1016.16 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 4.18.0.25.26 - Upgrade
Upgrade
ubuntu/linux-image-powerpc-e500mcto a version that resolves this vulnerability.Fixed in 4.18.0.25.26 - Upgrade
Upgrade
ubuntu/linux-image-powerpc-smpto a version that resolves this vulnerability.Fixed in 4.18.0.25.26 - Upgrade
Upgrade
ubuntu/linux-image-powerpc64-embto a version that resolves this vulnerability.Fixed in 4.18.0.25.26 - Upgrade
Upgrade
ubuntu/linux-image-powerpc64-smpto a version that resolves this vulnerability.Fixed in 4.18.0.25.26 - Upgrade
Upgrade
ubuntu/linux-image-raspi2to a version that resolves this vulnerability.Fixed in 4.18.0.1018.15 - Upgrade
Upgrade
ubuntu/linux-image-snapdragonto a version that resolves this vulnerability.Fixed in 4.18.0.25.26 - Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 4.18.0.25.26 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1017-oracleto a version that resolves this vulnerability.Fixed in 4.15.0-1017.19 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1036-gcpto a version that resolves this vulnerability.Fixed in 4.15.0-1036.38 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1036-gketo a version that resolves this vulnerability.Fixed in 4.15.0-1036.38 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1038-kvmto a version that resolves this vulnerability.Fixed in 4.15.0-1038.38 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1040-raspi2to a version that resolves this vulnerability.Fixed in 4.15.0-1040.43 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1043-awsto a version that resolves this vulnerability.Fixed in 4.15.0-1043.45 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1045-oemto a version that resolves this vulnerability.Fixed in 4.15.0-1045.50 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1057-snapdragonto a version that resolves this vulnerability.Fixed in 4.15.0-1057.62 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-54-genericto a version that resolves this vulnerability.Fixed in 4.15.0-54.58 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-54-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.15.0-54.58 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-54-lowlatencyto a version that resolves this vulnerability.Fixed in 4.15.0-54.58 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-1023-azureto a version that resolves this vulnerability.Fixed in 4.18.0-1023.24~18.04.1 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-25-genericto a version that resolves this vulnerability.Fixed in 4.18.0-25.26~18.04.1 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-25-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.18.0-25.26~18.04.1 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-25-lowlatencyto a version that resolves this vulnerability.Fixed in 4.18.0-25.26~18.04.1 - Upgrade
Upgrade
ubuntu/linux-image-4.18.0-25-snapdragonto a version that resolves this vulnerability.Fixed in 4.18.0-25.26~18.04.1 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 4.15.0.1043.42 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 4.18.0.1023.21 - Upgrade
Upgrade
ubuntu/linux-image-gcpto a version that resolves this vulnerability.Fixed in 4.15.0.1036.38 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 4.15.0.54.56 - Upgrade
Upgrade
ubuntu/linux-image-generic-hwe-18.04to a version that resolves this vulnerability.Fixed in 4.18.0.25.74 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.15.0.54.56 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpae-hwe-18.04to a version that resolves this vulnerability.Fixed in 4.18.0.25.74 - Upgrade
Upgrade
ubuntu/linux-image-gketo a version that resolves this vulnerability.Fixed in 4.15.0.1036.39 - Upgrade
Upgrade
ubuntu/linux-image-gke-4.15to a version that resolves this vulnerability.Fixed in 4.15.0.1036.39 - Upgrade
Upgrade
ubuntu/linux-image-kvmto a version that resolves this vulnerability.Fixed in 4.15.0.1038.38 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 4.15.0.54.56 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-hwe-18.04to a version that resolves this vulnerability.Fixed in 4.18.0.25.74 - Upgrade
Upgrade
ubuntu/linux-image-oemto a version that resolves this vulnerability.Fixed in 4.15.0.1045.49 - Upgrade
Upgrade
ubuntu/linux-image-oracleto a version that resolves this vulnerability.Fixed in 4.15.0.1017.20 - Upgrade
Upgrade
ubuntu/linux-image-raspi2to a version that resolves this vulnerability.Fixed in 4.15.0.1040.38 - Upgrade
Upgrade
ubuntu/linux-image-snapdragonto a version that resolves this vulnerability.Fixed in 4.15.0.1057.60 - Upgrade
Upgrade
ubuntu/linux-image-snapdragon-hwe-18.04to a version that resolves this vulnerability.Fixed in 4.18.0.25.74 - Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 4.15.0.54.56 - Upgrade
Upgrade
ubuntu/linux-image-virtual-hwe-18.04to a version that resolves this vulnerability.Fixed in 4.18.0.25.74 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1017-oracleto a version that resolves this vulnerability.Fixed in 4.15.0-1017.19~16.04.2 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1036-gcpto a version that resolves this vulnerability.Fixed in 4.15.0-1036.38~16.04.1 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1043-awsto a version that resolves this vulnerability.Fixed in 4.15.0-1043.45~16.04.1 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-1049-azureto a version that resolves this vulnerability.Fixed in 4.15.0-1049.54 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-54-genericto a version that resolves this vulnerability.Fixed in 4.15.0-54.58~16.04.1 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-54-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.15.0-54.58~16.04.1 - Upgrade
Upgrade
ubuntu/linux-image-4.15.0-54-lowlatencyto a version that resolves this vulnerability.Fixed in 4.15.0-54.58~16.04.1 - Upgrade
Upgrade
ubuntu/linux-image-4.4.0-1051-kvmto a version that resolves this vulnerability.Fixed in 4.4.0-1051.58 - Upgrade
Upgrade
ubuntu/linux-image-4.4.0-1087-awsto a version that resolves this vulnerability.Fixed in 4.4.0-1087.98 - Upgrade
Upgrade
ubuntu/linux-image-4.4.0-1114-raspi2to a version that resolves this vulnerability.Fixed in 4.4.0-1114.123 - Upgrade
Upgrade
ubuntu/linux-image-4.4.0-1118-snapdragonto a version that resolves this vulnerability.Fixed in 4.4.0-1118.124 - Upgrade
Upgrade
ubuntu/linux-image-4.4.0-154-genericto a version that resolves this vulnerability.Fixed in 4.4.0-154.181 - Upgrade
Upgrade
ubuntu/linux-image-4.4.0-154-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.4.0-154.181 - Upgrade
Upgrade
ubuntu/linux-image-4.4.0-154-lowlatencyto a version that resolves this vulnerability.Fixed in 4.4.0-154.181 - Upgrade
Upgrade
ubuntu/linux-image-4.4.0-154-powerpc-e500mcto a version that resolves this vulnerability.Fixed in 4.4.0-154.181 - Upgrade
Upgrade
ubuntu/linux-image-4.4.0-154-powerpc-smpto a version that resolves this vulnerability.Fixed in 4.4.0-154.181 - Upgrade
Upgrade
ubuntu/linux-image-4.4.0-154-powerpc64-embto a version that resolves this vulnerability.Fixed in 4.4.0-154.181 - Upgrade
Upgrade
ubuntu/linux-image-4.4.0-154-powerpc64-smpto a version that resolves this vulnerability.Fixed in 4.4.0-154.181 - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in 4.4.0.1087.90 - Upgrade
Upgrade
ubuntu/linux-image-aws-hweto a version that resolves this vulnerability.Fixed in 4.15.0.1043.43 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 4.15.0.1049.52 - Upgrade
Upgrade
ubuntu/linux-image-gcpto a version that resolves this vulnerability.Fixed in 4.15.0.1036.50 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 4.4.0.154.162 - Upgrade
Upgrade
ubuntu/linux-image-generic-hwe-16.04to a version that resolves this vulnerability.Fixed in 4.15.0.54.75 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 4.4.0.154.162 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpae-hwe-16.04to a version that resolves this vulnerability.Fixed in 4.15.0.54.75 - Upgrade
Upgrade
ubuntu/linux-image-gketo a version that resolves this vulnerability.Fixed in 4.15.0.1036.50 - Upgrade
Upgrade
ubuntu/linux-image-kvmto a version that resolves this vulnerability.Fixed in 4.4.0.1051.51 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 4.4.0.154.162 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-hwe-16.04to a version that resolves this vulnerability.Fixed in 4.15.0.54.75 - Upgrade
Upgrade
ubuntu/linux-image-oemto a version that resolves this vulnerability.Fixed in 4.15.0.54.75 - Upgrade
Upgrade
ubuntu/linux-image-oracleto a version that resolves this vulnerability.Fixed in 4.15.0.1017.11 - Upgrade
Upgrade
ubuntu/linux-image-powerpc-e500mcto a version that resolves this vulnerability.Fixed in 4.4.0.154.162 - Upgrade
Upgrade
ubuntu/linux-image-powerpc-smpto a version that resolves this vulnerability.Fixed in 4.4.0.154.162 - Upgrade
Upgrade
ubuntu/linux-image-powerpc64-embto a version that resolves this vulnerability.Fixed in 4.4.0.154.162 - Upgrade
Upgrade
ubuntu/linux-image-powerpc64-smpto a version that resolves this vulnerability.Fixed in 4.4.0.154.162 - Upgrade
Upgrade
ubuntu/linux-image-raspi2to a version that resolves this vulnerability.Fixed in 4.4.0.1114.114 - Upgrade
Upgrade
ubuntu/linux-image-snapdragonto a version that resolves this vulnerability.Fixed in 4.4.0.1118.110 - Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 4.4.0.154.162 - Upgrade
Upgrade
ubuntu/linux-image-virtual-hwe-16.04to a version that resolves this vulnerability.Fixed in 4.15.0.54.75 - Upgrade
Upgrade
Linux kernel for Ubuntuto a version that resolves this vulnerability.Patch USN-4017-1 - Upgrade
Upgrade
Linux kernel for Ubuntuto a version that resolves this vulnerability.Patch USN-4041-1
Event History
Frequently Asked Questions
What is the severity of USN-4041-1?
The severity of USN-4041-1 is categorized as medium due to its potential impact on network functionality.
How do I fix USN-4041-1?
To mitigate the issue of USN-4041-1, users should update their systems to the latest kernel version as specified in the advisory.
What systems are affected by USN-4041-1?
USN-4041-1 affects Ubuntu versions 19.04 with specific kernel packages including linux-image-5.0.0-1010-aws and others.
What specific vulnerabilities were addressed in USN-4041-1?
USN-4041-1 addresses a regression caused by the previous update that interfered with networking applications.
Is there a workaround for USN-4041-1 until a fix is applied?
A workaround for USN-4041-1 could involve adjusting the SO_SNDBUF settings in your network applications until the fix is applied.