[USN-3016-1] Linux kernel vulnerabilities

Severity High

Affected Packages 8

CVEs 8

Several security issues were fixed in the kernel.

Jesse Hertz and Tim Newsham discovered that the Linux netfilter
implementation did not correctly perform validation when handling 32 bit
compatibility IPT_SO_SET_REPLACE events on 64 bit platforms. A local
unprivileged attacker could use this to cause a denial of service (system
crash) or execute arbitrary code with administrative privileges.
(CVE-2016-4997)

Kangjie Lu discovered an information leak in the core USB implementation in
the Linux kernel. A local attacker could use this to obtain potentially
sensitive information from kernel memory. (CVE-2016-4482)

Kangjie Lu discovered an information leak in the timer handling
implementation in the Advanced Linux Sound Architecture (ALSA) subsystem of
the Linux kernel. A local attacker could use this to obtain potentially
sensitive information from kernel memory. (CVE-2016-4569, CVE-2016-4578)

Kangjie Lu discovered an information leak in the X.25 Call Request handling
in the Linux kernel. A local attacker could use this to obtain potentially
sensitive information from kernel memory. (CVE-2016-4580)

It was discovered that an information leak exists in the Rock Ridge
implementation in the Linux kernel. A local attacker who is able to mount a
malicious iso9660 file system image could exploit this flaw to obtain
potentially sensitive information from kernel memory. (CVE-2016-4913)

Baozeng Ding discovered that the Transparent Inter-process Communication
(TIPC) implementation in the Linux kernel did not verify socket existence
before use in some situations. A local attacker could use this to cause a
denial of service (system crash). (CVE-2016-4951)

Jesse Hertz and Tim Newsham discovered that the Linux netfilter
implementation did not correctly perform validation when handling
IPT_SO_SET_REPLACE events. A local unprivileged attacker could use this to
cause a denial of service (system crash) or obtain potentially sensitive
information from kernel memory. (CVE-2016-4998)

Package	Affected Version
pkg:deb/ubuntu/linux-image-extra-4.4.0-28-generic?distro=xenial	< 4.4.0-28.47
pkg:deb/ubuntu/linux-image-4.4.0-28-powerpc64-smp?distro=xenial	< 4.4.0-28.47
pkg:deb/ubuntu/linux-image-4.4.0-28-powerpc64-emb?distro=xenial	< 4.4.0-28.47
pkg:deb/ubuntu/linux-image-4.4.0-28-powerpc-smp?distro=xenial	< 4.4.0-28.47
pkg:deb/ubuntu/linux-image-4.4.0-28-powerpc-e500mc?distro=xenial	< 4.4.0-28.47
pkg:deb/ubuntu/linux-image-4.4.0-28-lowlatency?distro=xenial	< 4.4.0-28.47
pkg:deb/ubuntu/linux-image-4.4.0-28-generic?distro=xenial	< 4.4.0-28.47
pkg:deb/ubuntu/linux-image-4.4.0-28-generic-lpae?distro=xenial	< 4.4.0-28.47

ID

USN-3016-1

Severity

high

URL

https://ubuntu.com/security/notices/USN-3016-1

Published

2016-06-27T19:46:50
(8 years ago)

Modified

2016-06-27T19:46:50
(8 years ago)

Other Advisories

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:deb/ubuntu/linux-image-extra-4.4.0-28-generic?distro=xenial	ubuntu	linux-image-extra-4.4.0-28-generic	< 4.4.0-28.47	xenial
Affected	pkg:deb/ubuntu/linux-image-4.4.0-28-powerpc64-smp?distro=xenial	ubuntu	linux-image-4.4.0-28-powerpc64-smp	< 4.4.0-28.47	xenial
Affected	pkg:deb/ubuntu/linux-image-4.4.0-28-powerpc64-emb?distro=xenial	ubuntu	linux-image-4.4.0-28-powerpc64-emb	< 4.4.0-28.47	xenial
Affected	pkg:deb/ubuntu/linux-image-4.4.0-28-powerpc-smp?distro=xenial	ubuntu	linux-image-4.4.0-28-powerpc-smp	< 4.4.0-28.47	xenial
Affected	pkg:deb/ubuntu/linux-image-4.4.0-28-powerpc-e500mc?distro=xenial	ubuntu	linux-image-4.4.0-28-powerpc-e500mc	< 4.4.0-28.47	xenial
Affected	pkg:deb/ubuntu/linux-image-4.4.0-28-lowlatency?distro=xenial	ubuntu	linux-image-4.4.0-28-lowlatency	< 4.4.0-28.47	xenial
Affected	pkg:deb/ubuntu/linux-image-4.4.0-28-generic?distro=xenial	ubuntu	linux-image-4.4.0-28-generic	< 4.4.0-28.47	xenial
Affected	pkg:deb/ubuntu/linux-image-4.4.0-28-generic-lpae?distro=xenial	ubuntu	linux-image-4.4.0-28-generic-lpae	< 4.4.0-28.47	xenial

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date