USN-3371-1

Dashboard / Vulnerabilities / USN-3371-1

USN-3371-1

Summary: linux-hwe vulnerabilities

Details: It was discovered that the Linux kernel did not properly initialize a Wake- on-Lan data structure. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2014-9900) Alexander Potapenko discovered a race condition in the Advanced Linux Sound Architecture (ALSA) subsystem in the Linux kernel. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2017-1000380) Li Qiang discovered that the DRM driver for VMware Virtual GPUs in the Linux kernel did not properly validate some ioctl arguments. A local attacker could use this to cause a denial of service (system crash). (CVE-2017-7346) Murray McAllister discovered that the DRM driver for VMware Virtual GPUs in the Linux kernel did not properly initialize memory. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2017-9605)

References: https://ubuntu.com/security/notices/USN-3371-1, https://ubuntu.com/security/CVE-2014-9900, https://ubuntu.com/security/CVE-2017-7346, https://ubuntu.com/security/CVE-2017-9605, https://ubuntu.com/security/CVE-2017-1000380