1. Home
  2. Security Advisories
  3. Ubuntu
  4. USN-4041-2

[USN-4041-2] Linux kernel (HWE) update

Severity Medium
Affected Packages 19
CVEs 1
Info Packages Vulnerabilities

Several security issues were fixed in the Linux kernel.

USN-4041-1 provided updates for the Linux kernel in Ubuntu.
This update provides the corresponding updates for the Linux kernel
for Ubuntu 16.04 ESM.

USN-4017-2 fixed vulnerabilities in the Linux kernel. Unfortunately,
the update introduced a regression that interfered with networking
applications that setup very low SO_SNDBUF values. This update fixes
the problem.

We apologize for the inconvenience.

Jonathan Looney discovered that the Linux kernel could be coerced into
segmenting responses into multiple TCP segments. A remote attacker could
construct an ongoing sequence of requests to cause a denial of service.
(CVE-2019-11479)

Package Affected Version
pkg:deb/ubuntu/linux-image-virtual-lts-xenial?distro=trusty < 4.4.0.154.135
pkg:deb/ubuntu/linux-image-powerpc64-smp-lts-xenial?distro=trusty < 4.4.0.154.135
pkg:deb/ubuntu/linux-image-powerpc64-emb-lts-xenial?distro=trusty < 4.4.0.154.135
pkg:deb/ubuntu/linux-image-powerpc-smp-lts-xenial?distro=trusty < 4.4.0.154.135
pkg:deb/ubuntu/linux-image-powerpc-e500mc-lts-xenial?distro=trusty < 4.4.0.154.135
pkg:deb/ubuntu/linux-image-lowlatency-lts-xenial?distro=trusty < 4.4.0.154.135
pkg:deb/ubuntu/linux-image-generic-lts-xenial?distro=trusty < 4.4.0.154.135
pkg:deb/ubuntu/linux-image-generic-lpae-lts-xenial?distro=trusty < 4.4.0.154.135
pkg:deb/ubuntu/linux-image-azure?distro=trusty < 4.15.0.1049.36
pkg:deb/ubuntu/linux-image-aws?distro=trusty < 4.4.0.1048.49
pkg:deb/ubuntu/linux-image-4.4.0-154-powerpc64-smp?distro=trusty < 4.4.0-154.181~14.04.1
pkg:deb/ubuntu/linux-image-4.4.0-154-powerpc64-emb?distro=trusty < 4.4.0-154.181~14.04.1
pkg:deb/ubuntu/linux-image-4.4.0-154-powerpc-smp?distro=trusty < 4.4.0-154.181~14.04.1
pkg:deb/ubuntu/linux-image-4.4.0-154-powerpc-e500mc?distro=trusty < 4.4.0-154.181~14.04.1
pkg:deb/ubuntu/linux-image-4.4.0-154-lowlatency?distro=trusty < 4.4.0-154.181~14.04.1
pkg:deb/ubuntu/linux-image-4.4.0-154-generic?distro=trusty < 4.4.0-154.181~14.04.1
pkg:deb/ubuntu/linux-image-4.4.0-154-generic-lpae?distro=trusty < 4.4.0-154.181~14.04.1
pkg:deb/ubuntu/linux-image-4.4.0-1048-aws?distro=trusty < 4.4.0-1048.52
pkg:deb/ubuntu/linux-image-4.15.0-1049-azure?distro=trusty < 4.15.0-1049.54~14.04.1
ID
USN-4041-2
Severity
medium
URL
https://ubuntu.com/security/notices/USN-4041-2
Published
2019-06-29T04:59:04
(5 years ago)
Modified
2019-06-29T04:59:04
(5 years ago)
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:deb/ubuntu/linux-image-virtual-lts-xenial?distro=trusty ubuntu linux-image-virtual-lts-xenial < 4.4.0.154.135 trusty
Affected pkg:deb/ubuntu/linux-image-powerpc64-smp-lts-xenial?distro=trusty ubuntu linux-image-powerpc64-smp-lts-xenial < 4.4.0.154.135 trusty
Affected pkg:deb/ubuntu/linux-image-powerpc64-emb-lts-xenial?distro=trusty ubuntu linux-image-powerpc64-emb-lts-xenial < 4.4.0.154.135 trusty
Affected pkg:deb/ubuntu/linux-image-powerpc-smp-lts-xenial?distro=trusty ubuntu linux-image-powerpc-smp-lts-xenial < 4.4.0.154.135 trusty
Affected pkg:deb/ubuntu/linux-image-powerpc-e500mc-lts-xenial?distro=trusty ubuntu linux-image-powerpc-e500mc-lts-xenial < 4.4.0.154.135 trusty
Affected pkg:deb/ubuntu/linux-image-lowlatency-lts-xenial?distro=trusty ubuntu linux-image-lowlatency-lts-xenial < 4.4.0.154.135 trusty
Affected pkg:deb/ubuntu/linux-image-generic-lts-xenial?distro=trusty ubuntu linux-image-generic-lts-xenial < 4.4.0.154.135 trusty
Affected pkg:deb/ubuntu/linux-image-generic-lpae-lts-xenial?distro=trusty ubuntu linux-image-generic-lpae-lts-xenial < 4.4.0.154.135 trusty
Affected pkg:deb/ubuntu/linux-image-azure?distro=trusty ubuntu linux-image-azure < 4.15.0.1049.36 trusty
Affected pkg:deb/ubuntu/linux-image-aws?distro=trusty ubuntu linux-image-aws < 4.4.0.1048.49 trusty
Affected pkg:deb/ubuntu/linux-image-4.4.0-154-powerpc64-smp?distro=trusty ubuntu linux-image-4.4.0-154-powerpc64-smp < 4.4.0-154.181~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-4.4.0-154-powerpc64-emb?distro=trusty ubuntu linux-image-4.4.0-154-powerpc64-emb < 4.4.0-154.181~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-4.4.0-154-powerpc-smp?distro=trusty ubuntu linux-image-4.4.0-154-powerpc-smp < 4.4.0-154.181~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-4.4.0-154-powerpc-e500mc?distro=trusty ubuntu linux-image-4.4.0-154-powerpc-e500mc < 4.4.0-154.181~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-4.4.0-154-lowlatency?distro=trusty ubuntu linux-image-4.4.0-154-lowlatency < 4.4.0-154.181~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-4.4.0-154-generic?distro=trusty ubuntu linux-image-4.4.0-154-generic < 4.4.0-154.181~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-4.4.0-154-generic-lpae?distro=trusty ubuntu linux-image-4.4.0-154-generic-lpae < 4.4.0-154.181~14.04.1 trusty
Affected pkg:deb/ubuntu/linux-image-4.4.0-1048-aws?distro=trusty ubuntu linux-image-4.4.0-1048-aws < 4.4.0-1048.52 trusty
Affected pkg:deb/ubuntu/linux-image-4.15.0-1049-azure?distro=trusty ubuntu linux-image-4.15.0-1049-azure < 4.15.0-1049.54~14.04.1 trusty
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date