USN-3364-1: Linux kernel vulnerabilities

Ubuntu Security Notice USN-3364-1

24th July, 2017

linux, linux-raspi2, linux-snapdragon vulnerabilities

A security issue affects these releases of Ubuntu and its
derivatives:

• Ubuntu 16.04 LTS

Summary

Several security issues were fixed in the Linux kernel.

Software description

• linux
  - Linux kernel
  
  





• linux-raspi2
  - Linux kernel for Raspberry Pi 2
  
  





• linux-snapdragon
  - Linux kernel for Snapdragon processors
  
  

Details

It was discovered that the Linux kernel did not properly initialize a Wake-
on-Lan data structure. A local attacker could use this to expose sensitive
information (kernel memory). ()

Alexander Potapenko discovered a race condition in the Advanced Linux Sound
Architecture (ALSA) subsystem in the Linux kernel. A local attacker could
use this to expose sensitive information (kernel memory).
()

Jann Horn discovered that bpf in Linux kernel does not restrict the output
of the print_bpf_insn function. A local attacker could use this to obtain
sensitive address information. ()

Update instructions

The problem can be corrected by updating your system to the following
package version:

Ubuntu 16.04 LTS:

linux-image-powerpc-smp 4.4.0.87.93

linux-image-powerpc-e500mc 4.4.0.87.93

linux-image-generic 4.4.0.87.93

linux-image-powerpc64-emb 4.4.0.87.93

linux-image-generic-lpae 4.4.0.87.93

linux-image-snapdragon 4.4.0.1067.60

linux-image-lowlatency 4.4.0.87.93

linux-image-raspi2 4.4.0.1065.66

linux-image-powerpc64-smp 4.4.0.87.93

To update your system, please follow these instructions:
,

,

,

CVE-2017-9605