29/6/2019

USN-4041-1: Linux kernel update

First published: Sat Jun 29 2019(Updated: )

USN-4017-1 fixed vulnerabilities in the Linux kernel for Ubuntu. Unfortunately, the update introduced a regression that interfered with networking applications that setup very low SO_SNDBUF values. This update fixes the problem. We apologize for the inconvenience. Jonathan Looney discovered that the Linux kernel could be coerced into segmenting responses into multiple TCP segments. A remote attacker could construct an ongoing sequence of requests to cause a denial of service.

Affected Software	Affected Version	How to fix
All of
ubuntu/linux-image-5.0.0-1010-aws	<5.0.0-1010.11	5.0.0-1010.11
	=19.04
All of
ubuntu/linux-image-5.0.0-1010-azure	<5.0.0-1010.10	5.0.0-1010.10
	=19.04
All of
ubuntu/linux-image-5.0.0-1010-gcp	<5.0.0-1010.10	5.0.0-1010.10
	=19.04
All of
ubuntu/linux-image-5.0.0-1010-kvm	<5.0.0-1010.11	5.0.0-1010.11
	=19.04
All of
ubuntu/linux-image-5.0.0-1012-raspi2	<5.0.0-1012.12	5.0.0-1012.12
	=19.04
All of
ubuntu/linux-image-5.0.0-1016-snapdragon	<5.0.0-1016.17	5.0.0-1016.17
	=19.04
All of
ubuntu/linux-image-5.0.0-20-generic	<5.0.0-20.21	5.0.0-20.21
	=19.04
All of
ubuntu/linux-image-5.0.0-20-generic-lpae	<5.0.0-20.21	5.0.0-20.21
	=19.04
All of
ubuntu/linux-image-5.0.0-20-lowlatency	<5.0.0-20.21	5.0.0-20.21
	=19.04
All of
ubuntu/linux-image-aws	<5.0.0.1010.10	5.0.0.1010.10
	=19.04
All of
ubuntu/linux-image-azure	<5.0.0.1010.9	5.0.0.1010.9
	=19.04
All of
ubuntu/linux-image-gcp	<5.0.0.1010.10	5.0.0.1010.10
	=19.04
All of
ubuntu/linux-image-generic	<5.0.0.20.21	5.0.0.20.21
	=19.04
All of
ubuntu/linux-image-generic-lpae	<5.0.0.20.21	5.0.0.20.21
	=19.04
All of
ubuntu/linux-image-gke	<5.0.0.1010.10	5.0.0.1010.10
	=19.04
All of
ubuntu/linux-image-kvm	<5.0.0.1010.10	5.0.0.1010.10
	=19.04
All of
ubuntu/linux-image-lowlatency	<5.0.0.20.21	5.0.0.20.21
	=19.04
All of
ubuntu/linux-image-raspi2	<5.0.0.1012.9	5.0.0.1012.9
	=19.04
All of
ubuntu/linux-image-snapdragon	<5.0.0.1016.9	5.0.0.1016.9
	=19.04
All of
ubuntu/linux-image-virtual	<5.0.0.20.21	5.0.0.20.21
	=19.04
All of
ubuntu/linux-image-4.18.0-1015-gcp	<4.18.0-1015.16	4.18.0-1015.16
	=18.10
All of
ubuntu/linux-image-4.18.0-1016-kvm	<4.18.0-1016.17	4.18.0-1016.17
	=18.10
All of
ubuntu/linux-image-4.18.0-1018-raspi2	<4.18.0-1018.21	4.18.0-1018.21
	=18.10
All of
ubuntu/linux-image-4.18.0-1020-aws	<4.18.0-1020.24	4.18.0-1020.24
	=18.10
All of
ubuntu/linux-image-4.18.0-1023-azure	<4.18.0-1023.24	4.18.0-1023.24
	=18.10
All of
ubuntu/linux-image-4.18.0-25-generic	<4.18.0-25.26	4.18.0-25.26
	=18.10
All of
ubuntu/linux-image-4.18.0-25-generic-lpae	<4.18.0-25.26	4.18.0-25.26
	=18.10
All of
ubuntu/linux-image-4.18.0-25-lowlatency	<4.18.0-25.26	4.18.0-25.26
	=18.10
All of
ubuntu/linux-image-4.18.0-25-snapdragon	<4.18.0-25.26	4.18.0-25.26
	=18.10
All of
ubuntu/linux-image-aws	<4.18.0.1020.20	4.18.0.1020.20
	=18.10
All of
ubuntu/linux-image-azure	<4.18.0.1023.25	4.18.0.1023.25
	=18.10
All of
ubuntu/linux-image-gcp	<4.18.0.1015.15	4.18.0.1015.15
	=18.10
All of
ubuntu/linux-image-generic	<4.18.0.25.26	4.18.0.25.26
	=18.10
All of
ubuntu/linux-image-generic-lpae	<4.18.0.25.26	4.18.0.25.26
	=18.10
All of
ubuntu/linux-image-gke	<4.18.0.1015.15	4.18.0.1015.15
	=18.10
All of
ubuntu/linux-image-kvm	<4.18.0.1016.16	4.18.0.1016.16
	=18.10
All of
ubuntu/linux-image-lowlatency	<4.18.0.25.26	4.18.0.25.26
	=18.10
All of
ubuntu/linux-image-powerpc-e500mc	<4.18.0.25.26	4.18.0.25.26
	=18.10
All of
ubuntu/linux-image-powerpc-smp	<4.18.0.25.26	4.18.0.25.26
	=18.10
All of
ubuntu/linux-image-powerpc64-emb	<4.18.0.25.26	4.18.0.25.26
	=18.10
All of
ubuntu/linux-image-powerpc64-smp	<4.18.0.25.26	4.18.0.25.26
	=18.10
All of
ubuntu/linux-image-raspi2	<4.18.0.1018.15	4.18.0.1018.15
	=18.10
All of
ubuntu/linux-image-snapdragon	<4.18.0.25.26	4.18.0.25.26
	=18.10
All of
ubuntu/linux-image-virtual	<4.18.0.25.26	4.18.0.25.26
	=18.10
All of
ubuntu/linux-image-4.15.0-1017-oracle	<4.15.0-1017.19	4.15.0-1017.19
	=18.04
All of
ubuntu/linux-image-4.15.0-1036-gcp	<4.15.0-1036.38	4.15.0-1036.38
	=18.04
All of
ubuntu/linux-image-4.15.0-1036-gke	<4.15.0-1036.38	4.15.0-1036.38
	=18.04
All of
ubuntu/linux-image-4.15.0-1038-kvm	<4.15.0-1038.38	4.15.0-1038.38
	=18.04
All of
ubuntu/linux-image-4.15.0-1040-raspi2	<4.15.0-1040.43	4.15.0-1040.43
	=18.04
All of
ubuntu/linux-image-4.15.0-1043-aws	<4.15.0-1043.45	4.15.0-1043.45
	=18.04
All of
ubuntu/linux-image-4.15.0-1045-oem	<4.15.0-1045.50	4.15.0-1045.50
	=18.04
All of
ubuntu/linux-image-4.15.0-1057-snapdragon	<4.15.0-1057.62	4.15.0-1057.62
	=18.04
All of
ubuntu/linux-image-4.15.0-54-generic	<4.15.0-54.58	4.15.0-54.58
	=18.04
All of
ubuntu/linux-image-4.15.0-54-generic-lpae	<4.15.0-54.58	4.15.0-54.58
	=18.04
All of
ubuntu/linux-image-4.15.0-54-lowlatency	<4.15.0-54.58	4.15.0-54.58
	=18.04
All of
ubuntu/linux-image-4.18.0-1023-azure	<4.18.0-1023.24~18.04.1	4.18.0-1023.24~18.04.1
	=18.04
All of
ubuntu/linux-image-4.18.0-25-generic	<4.18.0-25.26~18.04.1	4.18.0-25.26~18.04.1
	=18.04
All of
ubuntu/linux-image-4.18.0-25-generic-lpae	<4.18.0-25.26~18.04.1	4.18.0-25.26~18.04.1
	=18.04
All of
ubuntu/linux-image-4.18.0-25-lowlatency	<4.18.0-25.26~18.04.1	4.18.0-25.26~18.04.1
	=18.04
All of
ubuntu/linux-image-4.18.0-25-snapdragon	<4.18.0-25.26~18.04.1	4.18.0-25.26~18.04.1
	=18.04
All of
ubuntu/linux-image-aws	<4.15.0.1043.42	4.15.0.1043.42
	=18.04
All of
ubuntu/linux-image-azure	<4.18.0.1023.21	4.18.0.1023.21
	=18.04
All of
ubuntu/linux-image-gcp	<4.15.0.1036.38	4.15.0.1036.38
	=18.04
All of
ubuntu/linux-image-generic	<4.15.0.54.56	4.15.0.54.56
	=18.04
All of
ubuntu/linux-image-generic-hwe-18.04	<4.18.0.25.74	4.18.0.25.74
	=18.04
All of
ubuntu/linux-image-generic-lpae	<4.15.0.54.56	4.15.0.54.56
	=18.04
All of
ubuntu/linux-image-generic-lpae-hwe-18.04	<4.18.0.25.74	4.18.0.25.74
	=18.04
All of
ubuntu/linux-image-gke	<4.15.0.1036.39	4.15.0.1036.39
	=18.04
All of
ubuntu/linux-image-gke-4.15	<4.15.0.1036.39	4.15.0.1036.39
	=18.04
All of
ubuntu/linux-image-kvm	<4.15.0.1038.38	4.15.0.1038.38
	=18.04
All of
ubuntu/linux-image-lowlatency	<4.15.0.54.56	4.15.0.54.56
	=18.04
All of
ubuntu/linux-image-lowlatency-hwe-18.04	<4.18.0.25.74	4.18.0.25.74
	=18.04
All of
ubuntu/linux-image-oem	<4.15.0.1045.49	4.15.0.1045.49
	=18.04
All of
ubuntu/linux-image-oracle	<4.15.0.1017.20	4.15.0.1017.20
	=18.04
All of
ubuntu/linux-image-raspi2	<4.15.0.1040.38	4.15.0.1040.38
	=18.04
All of
ubuntu/linux-image-snapdragon	<4.15.0.1057.60	4.15.0.1057.60
	=18.04
All of
ubuntu/linux-image-snapdragon-hwe-18.04	<4.18.0.25.74	4.18.0.25.74
	=18.04
All of
ubuntu/linux-image-virtual	<4.15.0.54.56	4.15.0.54.56
	=18.04
All of
ubuntu/linux-image-virtual-hwe-18.04	<4.18.0.25.74	4.18.0.25.74
	=18.04
All of
ubuntu/linux-image-4.15.0-1017-oracle	<4.15.0-1017.19~16.04.2	4.15.0-1017.19~16.04.2
	=16.04
All of
ubuntu/linux-image-4.15.0-1036-gcp	<4.15.0-1036.38~16.04.1	4.15.0-1036.38~16.04.1
	=16.04
All of
ubuntu/linux-image-4.15.0-1043-aws	<4.15.0-1043.45~16.04.1	4.15.0-1043.45~16.04.1
	=16.04
All of
ubuntu/linux-image-4.15.0-1049-azure	<4.15.0-1049.54	4.15.0-1049.54
	=16.04
All of
ubuntu/linux-image-4.15.0-54-generic	<4.15.0-54.58~16.04.1	4.15.0-54.58~16.04.1
	=16.04
All of
ubuntu/linux-image-4.15.0-54-generic-lpae	<4.15.0-54.58~16.04.1	4.15.0-54.58~16.04.1
	=16.04
All of
ubuntu/linux-image-4.15.0-54-lowlatency	<4.15.0-54.58~16.04.1	4.15.0-54.58~16.04.1
	=16.04
All of
ubuntu/linux-image-4.4.0-1051-kvm	<4.4.0-1051.58	4.4.0-1051.58
	=16.04
All of
ubuntu/linux-image-4.4.0-1087-aws	<4.4.0-1087.98	4.4.0-1087.98
	=16.04
All of
ubuntu/linux-image-4.4.0-1114-raspi2	<4.4.0-1114.123	4.4.0-1114.123
	=16.04
All of
ubuntu/linux-image-4.4.0-1118-snapdragon	<4.4.0-1118.124	4.4.0-1118.124
	=16.04
All of
ubuntu/linux-image-4.4.0-154-generic	<4.4.0-154.181	4.4.0-154.181
	=16.04
All of
ubuntu/linux-image-4.4.0-154-generic-lpae	<4.4.0-154.181	4.4.0-154.181
	=16.04
All of
ubuntu/linux-image-4.4.0-154-lowlatency	<4.4.0-154.181	4.4.0-154.181
	=16.04
All of
ubuntu/linux-image-4.4.0-154-powerpc-e500mc	<4.4.0-154.181	4.4.0-154.181
	=16.04
All of
ubuntu/linux-image-4.4.0-154-powerpc-smp	<4.4.0-154.181	4.4.0-154.181
	=16.04
All of
ubuntu/linux-image-4.4.0-154-powerpc64-emb	<4.4.0-154.181	4.4.0-154.181
	=16.04
All of
ubuntu/linux-image-4.4.0-154-powerpc64-smp	<4.4.0-154.181	4.4.0-154.181
	=16.04
All of
ubuntu/linux-image-aws	<4.4.0.1087.90	4.4.0.1087.90
	=16.04
All of
ubuntu/linux-image-aws-hwe	<4.15.0.1043.43	4.15.0.1043.43
	=16.04
All of
ubuntu/linux-image-azure	<4.15.0.1049.52	4.15.0.1049.52
	=16.04
All of
ubuntu/linux-image-gcp	<4.15.0.1036.50	4.15.0.1036.50
	=16.04
All of
ubuntu/linux-image-generic	<4.4.0.154.162	4.4.0.154.162
	=16.04
All of
ubuntu/linux-image-generic-hwe-16.04	<4.15.0.54.75	4.15.0.54.75
	=16.04
All of
ubuntu/linux-image-generic-lpae	<4.4.0.154.162	4.4.0.154.162
	=16.04
All of
ubuntu/linux-image-generic-lpae-hwe-16.04	<4.15.0.54.75	4.15.0.54.75
	=16.04
All of
ubuntu/linux-image-gke	<4.15.0.1036.50	4.15.0.1036.50
	=16.04
All of
ubuntu/linux-image-kvm	<4.4.0.1051.51	4.4.0.1051.51
	=16.04
All of
ubuntu/linux-image-lowlatency	<4.4.0.154.162	4.4.0.154.162
	=16.04
All of
ubuntu/linux-image-lowlatency-hwe-16.04	<4.15.0.54.75	4.15.0.54.75
	=16.04
All of
ubuntu/linux-image-oem	<4.15.0.54.75	4.15.0.54.75
	=16.04
All of
ubuntu/linux-image-oracle	<4.15.0.1017.11	4.15.0.1017.11
	=16.04
All of
ubuntu/linux-image-powerpc-e500mc	<4.4.0.154.162	4.4.0.154.162
	=16.04
All of
ubuntu/linux-image-powerpc-smp	<4.4.0.154.162	4.4.0.154.162
	=16.04
All of
ubuntu/linux-image-powerpc64-emb	<4.4.0.154.162	4.4.0.154.162
	=16.04
All of
ubuntu/linux-image-powerpc64-smp	<4.4.0.154.162	4.4.0.154.162
	=16.04
All of
ubuntu/linux-image-raspi2	<4.4.0.1114.114	4.4.0.1114.114
	=16.04
All of
ubuntu/linux-image-snapdragon	<4.4.0.1118.110	4.4.0.1118.110
	=16.04
All of
ubuntu/linux-image-virtual	<4.4.0.154.162	4.4.0.154.162
	=16.04
All of
ubuntu/linux-image-virtual-hwe-16.04	<4.15.0.54.75	4.15.0.54.75
	=16.04

Never miss a vulnerability like this again

Reference Links

Child vulnerabilities

(Contains the following vulnerabilities)

CVE-2019-11479

agent/description
agent/event
agent/first-publish-date
agent/last-modified-date
agent/references
agent/severity
agent/softwarecombine
agent/tags
agent/title
agent/type
collector/usn
source/Ubuntu
anchor-related/USN-4041-2
agent/software-canonical-lookup
package-manager/ubuntu
vendor/ubuntu
canonical/ubuntu ubuntu
version/ubuntu ubuntu/19.04
version/ubuntu ubuntu/18.10
version/ubuntu ubuntu/18.04
version/ubuntu ubuntu/16.04

USN-4041-1: Linux kernel update

Never miss a vulnerability like this again

Reference Links

Child vulnerabilities

Company

Resources

Contact