USN-3631-1

Dashboard / Vulnerabilities / USN-3631-1

USN-3631-1

Summary: linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities

Details: It was discovered that a buffer overread vulnerability existed in the keyring subsystem of the Linux kernel. A local attacker could possibly use this to expose sensitive information (kernel memory). (CVE-2017-13305) It was discovered that the DM04/QQBOX USB driver in the Linux kernel did not properly handle device attachment and warm-start. A physically proximate attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2017-16538) Luo Quan and Wei Yang discovered that a race condition existed in the Advanced Linux Sound Architecture (ALSA) subsystem of the Linux kernel when handling ioctl()s. A local attacker could use this to cause a denial of service (system deadlock). (CVE-2018-1000004) Wang Qize discovered that an information disclosure vulnerability existed in the SMBus driver for ACPI Embedded Controllers in the Linux kernel. A local attacker could use this to expose sensitive information (kernel pointer addresses). (CVE-2018-5750) 范龙飞 discovered that a race condition existed in the Advanced Linux Sound Architecture (ALSA) subsystem of the Linux kernel that could lead to a use-after-free or an out-of-bounds buffer access. A local attacker with access to /dev/snd/seq could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2018-7566)

References: https://ubuntu.com/security/notices/USN-3631-1, https://ubuntu.com/security/CVE-2017-13305, https://ubuntu.com/security/CVE-2017-16538, https://ubuntu.com/security/CVE-2018-5750, https://ubuntu.com/security/CVE-2018-7566, https://ubuntu.com/security/CVE-2018-1000004