USN-3762-1

Dashboard / Vulnerabilities / USN-3762-1

USN-3762-1

Summary: linux, linux-aws, linux-azure, linux-gcp, linux-kvm, linux-raspi2 vulnerabilities

Details: It was discovered that the VirtIO subsystem in the Linux kernel did not properly initialize memory in some situations. A local attacker could use this to possibly expose sensitive information (kernel memory). (CVE-2018-1118) Seunghun Han discovered an information leak in the ACPI handling code in the Linux kernel when handling early termination of ACPI table loading. A local attacker could use this to expose sensitive informal (kernel address locations). (CVE-2017-13695)

References: https://ubuntu.com/security/notices/USN-3762-1, https://ubuntu.com/security/CVE-2017-13695, https://ubuntu.com/security/CVE-2018-1118