ESB-2018.1916 - [Ubuntu] kernel: Multiple vulnerabilities 2018-07-03

Printable version
PGP/GPG verifiable version

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                               ESB-2018.1916
                    Linux kernel (OEM) vulnerabilities
                                3 July 2018

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:           linux
                   linux-raspi2
                   linux-oem
Publisher:         Ubuntu
Operating System:  Ubuntu
Impact/Access:     Access Privileged Data -- Existing Account
                   Denial of Service      -- Existing Account
Resolution:        Patch/Upgrade
CVE Names:         CVE-2018-11508 CVE-2018-7757 CVE-2018-7755
                   CVE-2018-6927 CVE-2018-5803 CVE-2018-5750
                   CVE-2018-1130  

Reference:         ESB-2018.1576
                   ESB-2018.1549
                   ESB-2018.1262
                   ESB-2018.0533.2

Original Bulletin: 
   https://usn.ubuntu.com/3697-1/
   https://usn.ubuntu.com/3697-2/

Comment: This bulletin contains two (2) Ubuntu security advisories.

- --------------------------BEGIN INCLUDED TEXT--------------------

==========================================================================
Ubuntu Security Notice USN-3697-2
July 02, 2018

linux-oem vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- - Ubuntu 16.04 LTS

Summary:

Several security issues were fixed in the Linux kernel.

Software Description:
- - linux-oem: Linux kernel for OEM processors

Details:

It was discovered that a null pointer dereference vulnerability existed in
the DCCP protocol implementation in the Linux kernel. A local attacker
could use this to cause a denial of service (system crash). (CVE-2018-1130)

Jann Horn discovered that the 32 bit adjtimex() syscall implementation for
64 bit Linux kernels did not properly initialize memory returned to user
space in some situations. A local attacker could use this to expose
sensitive information (kernel memory). (CVE-2018-11508)

Wang Qize discovered that an information disclosure vulnerability existed
in the SMBus driver for ACPI Embedded Controllers in the Linux kernel. A
local attacker could use this to expose sensitive information (kernel
pointer addresses). (CVE-2018-5750)

It was discovered that the SCTP Protocol implementation in the Linux kernel
did not properly validate userspace provided payload lengths in some
situations. A local attacker could use this to cause a denial of service
(system crash). (CVE-2018-5803)

It was discovered that an integer overflow error existed in the futex
implementation in the Linux kernel. A local attacker could use this to
cause a denial of service (system crash). (CVE-2018-6927)

It was discovered that an information leak vulnerability existed in the
floppy driver in the Linux kernel. A local attacker could use this to
expose sensitive information (kernel memory). (CVE-2018-7755)

It was discovered that a memory leak existed in the SAS driver subsystem of
the Linux kernel. A local attacker could use this to cause a denial of
service (memory exhaustion). (CVE-2018-7757)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS:
  linux-image-4.13.0-1031-oem     4.13.0-1031.35
  linux-image-oem                 4.13.0.1031.36

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References:
  https://usn.ubuntu.com/usn/usn-3697-2
  https://usn.ubuntu.com/usn/usn-3697-1
  CVE-2018-1130, CVE-2018-11508, CVE-2018-5750, CVE-2018-5803,
  CVE-2018-6927, CVE-2018-7755, CVE-2018-7757

Package Information:
  https://launchpad.net/ubuntu/+source/linux-oem/4.13.0-1031.35

- -----BEGIN PGP SIGNATURE-----
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=XIb7
- -----END PGP SIGNATURE-----

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        https://www.auscert.org.au/bulletins/

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iQIVAwUBWzrP9WaOgq3Tt24GAQgwwhAA1kipYfAiOO2iMFYqD1hD8+1hjQW3YbCT
kupdYGFKrdo33p5Au3R4m3Sfd0tN7gQOVD0k2DEPaUefK1yY8bOB5KuI1xFykh3a
33t3V+80dj8RIFu17hFxpDO17wZZ3cwv/pI+WxExu/NguZu85OiGirwvOwHLOfMK
7kCt0xgWlCHcaD1S5lI4deiuFCgHx8wGI6dtVWUosyQeqnQHzqrv+rZO7V7T4Eq3
2cnz6w5St/Slhc54imyudJUXU2E0srcEEUSpMl0m1C194yMzzizLNgKPMQjiguNI
3ieysKFSdcIcGzG5oQmmj7gIGJCDJFdVhCglufGibnYOkTRijV7o/VgWeqq+EOd2
PAMROk+Sj1He01e8rBhamxZ3nSdrsno/KCtWsAJYUqLZP773oNws0J25o3TXQ71E
fLhIIoTU4O/zhB/j72AZ4sioWt/M6ZTAkLx/FN2xRN/np9ywuXSp4WbSwnebBFlD
O2XDSba8TYKJ5iVEj0gaYzVpYGskuAdTmTScvrXgSmosivlviCyAu+MJI9rKy6RV
n1JYMXFSFbJG+S7RerYzQ+R3Mov668+5HVFLm+2eivbj2pJ3XdzckpWbkC0k/Pba
JCo++7XBDuTtqn1RyonvgDVMmVQZ6YjasECewkMWHWmcYu9ZYZZgfjcoM6t4s136
xEOheoCaNW4=
=1QFU
-----END PGP SIGNATURE-----

« Back to bulletins