USN-3333-1: Linux kernel (HWE) vulnerabilities

Ubuntu Security Notice USN-3333-1

19th June, 2017

linux-hwe, linux-meta-hwe vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 16.04 LTS

Summary

Several security issues were fixed in the Linux kernel.

Software description

• linux-hwe
  - Linux hardware enablement (HWE) kernel
  
  

Details

It was discovered that a use-after-free flaw existed in the filesystem
encryption subsystem in the Linux kernel. A local attacker could use this
to cause a denial of service (system crash). ()

Roee Hay discovered that the parallel port printer driver in the Linux
kernel did not properly bounds check passed arguments. A local attacker
with write access to the kernel command line arguments could use this to
execute arbitrary code. ()

A double free bug was discovered in the IPv4 stack of the Linux kernel. An
attacker could use this to cause a denial of service (system crash).
()

Andrey Konovalov discovered a flaw in the handling of inheritance in the
Linux kernel's IPv6 stack. A local user could exploit this issue to cause a
denial of service or possibly other unspecified problems. ()

It was discovered that the transmission control protocol (tcp) v6 in the
Linux kernel mishandled inheritance. A local attacker could exploit this
issue to cause a denial of service or potentially other unspecified
problems. ()

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 16.04 LTS:

To update your system, please follow these instructions:
,

,

,

,

,

CVE-2017-9242