1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-3016-4

[USN-3016-4] Linux kernel (Xenial HWE) vulnerabilities

Severity High
Affected Packages 8
CVEs 8
Info Packages Vulnerabilities

Several security issues were fixed in the kernel.

USN-3016-1 fixed vulnerabilities in the Linux kernel for Ubuntu
16.04 LTS. This update provides the corresponding updates for the
Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for
Ubuntu 14.04 LTS.

Jesse Hertz and Tim Newsham discovered that the Linux netfilter
implementation did not correctly perform validation when handling 32 bit
compatibility IPT_SO_SET_REPLACE events on 64 bit platforms. A local
unprivileged attacker could use this to cause a denial of service (system
crash) or execute arbitrary code with administrative privileges.
(CVE-2016-4997)

Kangjie Lu discovered an information leak in the core USB implementation in
the Linux kernel. A local attacker could use this to obtain potentially
sensitive information from kernel memory. (CVE-2016-4482)

Kangjie Lu discovered an information leak in the timer handling
implementation in the Advanced Linux Sound Architecture (ALSA) subsystem of
the Linux kernel. A local attacker could use this to obtain potentially
sensitive information from kernel memory. (CVE-2016-4569, CVE-2016-4578)

Kangjie Lu discovered an information leak in the X.25 Call Request handling
in the Linux kernel. A local attacker could use this to obtain potentially
sensitive information from kernel memory. (CVE-2016-4580)

It was discovered that an information leak exists in the Rock Ridge
implementation in the Linux kernel. A local attacker who is able to mount a
malicious iso9660 file system image could exploit this flaw to obtain
potentially sensitive information from kernel memory. (CVE-2016-4913)

Baozeng Ding discovered that the Transparent Inter-process Communication
(TIPC) implementation in the Linux kernel did not verify socket existence
before use in some situations. A local attacker could use this to cause a
denial of service (system crash). (CVE-2016-4951)

Jesse Hertz and Tim Newsham discovered that the Linux netfilter
implementation did not correctly perform validation when handling
IPT_SO_SET_REPLACE events. A local unprivileged attacker could use this to
cause a denial of service (system crash) or obtain potentially sensitive
information from kernel memory. (CVE-2016-4998)

Package Affected Version
pkg:deb/ubuntu/linux-image-extra-4.4.0-28-generic?distro=trusty < 4.4.0-28.47~14.04.1
pkg:deb/ubuntu/linux-image-4.4.0-28-powerpc64-smp?distro=trusty < 4.4.0-28.47~14.04.1
pkg:deb/ubuntu/linux-image-4.4.0-28-powerpc64-emb?distro=trusty < 4.4.0-28.47~14.04.1
pkg:deb/ubuntu/linux-image-4.4.0-28-powerpc-smp?distro=trusty < 4.4.0-28.47~14.04.1
pkg:deb/ubuntu/linux-image-4.4.0-28-powerpc-e500mc?distro=trusty < 4.4.0-28.47~14.04.1
pkg:deb/ubuntu/linux-image-4.4.0-28-lowlatency?distro=trusty < 4.4.0-28.47~14.04.1
pkg:deb/ubuntu/linux-image-4.4.0-28-generic?distro=trusty < 4.4.0-28.47~14.04.1
pkg:deb/ubuntu/linux-image-4.4.0-28-generic-lpae?distro=trusty < 4.4.0-28.47~14.04.1
ID
USN-3016-4
Severity
high
URL
https://ubuntu.com/security/notices/USN-3016-4
Published
2016-06-27T20:55:14
(8 years ago)
Modified
2016-06-27T20:55:14
(8 years ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/linux-image-extra-4.4.0-28-generic?distro=trusty ubuntu linux-image-extra-4.4.0-28-generic < 4.4.0-28.47~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-4.4.0-28-powerpc64-smp?distro=trusty ubuntu linux-image-4.4.0-28-powerpc64-smp < 4.4.0-28.47~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-4.4.0-28-powerpc64-emb?distro=trusty ubuntu linux-image-4.4.0-28-powerpc64-emb < 4.4.0-28.47~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-4.4.0-28-powerpc-smp?distro=trusty ubuntu linux-image-4.4.0-28-powerpc-smp < 4.4.0-28.47~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-4.4.0-28-powerpc-e500mc?distro=trusty ubuntu linux-image-4.4.0-28-powerpc-e500mc < 4.4.0-28.47~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-4.4.0-28-lowlatency?distro=trusty ubuntu linux-image-4.4.0-28-lowlatency < 4.4.0-28.47~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-4.4.0-28-generic?distro=trusty ubuntu linux-image-4.4.0-28-generic < 4.4.0-28.47~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-4.4.0-28-generic-lpae?distro=trusty ubuntu linux-image-4.4.0-28-generic-lpae < 4.4.0-28.47~14.04.1 trusty
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date