USN-4253-2: Linux kernel (HWE) vulnerability
USN-4253-1 fixed vulnerabilities in the Linux kernel for Ubuntu 19.10. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 19.10 for Ubuntu 18.04 LTS. It was discovered that the Linux kernel did not properly clear data structures on context switches for certain Intel graphics processors. A local attacker could use this to expose sensitive information.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-5.3.0-28-genericto a version that resolves this vulnerability.Fixed in 5.3.0-28.30~18.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.3.0-28-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.3.0-28.30~18.04.1 - Upgrade
Upgrade
ubuntu/linux-image-5.3.0-28-lowlatencyto a version that resolves this vulnerability.Fixed in 5.3.0-28.30~18.04.1 - Upgrade
Upgrade
ubuntu/linux-image-generic-hwe-18.04to a version that resolves this vulnerability.Fixed in 5.3.0.28.96 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpae-hwe-18.04to a version that resolves this vulnerability.Fixed in 5.3.0.28.96 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-hwe-18.04to a version that resolves this vulnerability.Fixed in 5.3.0.28.96 - Upgrade
Upgrade
ubuntu/linux-image-snapdragon-hwe-18.04to a version that resolves this vulnerability.Fixed in 5.3.0.28.96 - Upgrade
Upgrade
ubuntu/linux-image-virtual-hwe-18.04to a version that resolves this vulnerability.Fixed in 5.3.0.28.96 - Upgrade
Upgrade
Linux kernel (HWE) for Ubuntu 18.04 LTSto a version that resolves this vulnerability.Patch USN-4253-2
Event History
Frequently Asked Questions
What is the vulnerability ID for this Linux kernel (HWE) vulnerability?
USN-4253-2
What software versions are affected by the Linux kernel (HWE) vulnerability?
Ubuntu 18.04 LTS with Linux kernel versions 5.3.0-28.30~18.04.1, 5.3.0-28.30~18.04.1-lpae, 5.3.0-28.30~18.04.1-lowlatency, 5.3.0.28.96 (hwe-18.04) and higher
What is the severity of the Linux kernel (HWE) vulnerability?
The severity of the vulnerability is not specified in the provided information.
How can I fix the Linux kernel (HWE) vulnerability?
Update your Ubuntu 18.04 LTS system with the latest Linux kernel packages (5.3.0-28.30~18.04.1, 5.3.0-28.30~18.04.1-lpae, 5.3.0-28.30~18.04.1-lowlatency, 5.3.0.28.96 (hwe-18.04) or higher) available from the Ubuntu repositories.
Where can I find more information about the Linux kernel (HWE) vulnerability?
You can find more information about the vulnerability on the Ubuntu security advisory page: [USN-4253-2](https://ubuntu.com/security/notices/USN-4253-2)