[USN-3292-2] Linux kernel (HWE) vulnerability

Severity Medium

Affected Packages 4

CVEs 1

The system could be made to crash or run programs as an administrator.

USN-3292-1 fixed a vulnerability in the Linux kernel for Ubuntu 16.10.
This update provides the corresponding updates for the Linux Hardware
Enablement (HWE) kernel from Ubuntu 16.10 for Ubuntu 16.04 LTS.

Jason Donenfeld discovered a heap overflow in the MACsec module in the
Linux kernel. An attacker could use this to cause a denial of service
(system crash) or possibly execute arbitrary code.

Package	Affected Version
pkg:deb/ubuntu/linux-image-extra-4.8.0-52-generic?distro=xenial	< 4.8.0-52.55~16.04.1
pkg:deb/ubuntu/linux-image-4.8.0-52-lowlatency?distro=xenial	< 4.8.0-52.55~16.04.1
pkg:deb/ubuntu/linux-image-4.8.0-52-generic?distro=xenial	< 4.8.0-52.55~16.04.1
pkg:deb/ubuntu/linux-image-4.8.0-52-generic-lpae?distro=xenial	< 4.8.0-52.55~16.04.1

ID

USN-3292-2

Severity

medium

URL

https://ubuntu.com/security/notices/USN-3292-2

Published

2017-05-17T01:20:09
(7 years ago)

Modified

2017-05-17T01:20:09
(7 years ago)

Other Advisories

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:deb/ubuntu/linux-image-extra-4.8.0-52-generic?distro=xenial	ubuntu	linux-image-extra-4.8.0-52-generic	< 4.8.0-52.55~16.04.1	xenial
Affected	pkg:deb/ubuntu/linux-image-4.8.0-52-lowlatency?distro=xenial	ubuntu	linux-image-4.8.0-52-lowlatency	< 4.8.0-52.55~16.04.1	xenial
Affected	pkg:deb/ubuntu/linux-image-4.8.0-52-generic?distro=xenial	ubuntu	linux-image-4.8.0-52-generic	< 4.8.0-52.55~16.04.1	xenial
Affected	pkg:deb/ubuntu/linux-image-4.8.0-52-generic-lpae?distro=xenial	ubuntu	linux-image-4.8.0-52-generic-lpae	< 4.8.0-52.55~16.04.1	xenial

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date