ID

VAR-201909-0695

CVE

CVE-2019-14835

TITLE

Linux kernel Buffer error vulnerability

DESCRIPTION

A buffer overflow flaw was found, in versions from 2.6.34 to 5.2.x, in the way Linux kernel's vhost functionality that translates virtqueue buffers to IOVs, logged the buffer descriptors during migration. A privileged guest user able to pass descriptors with invalid length to the host when migration is underway, could use this flaw to increase their privileges on the host. This vulnerability stems from the incorrect verification of data boundaries when the network system or product performs operations on the memory, resulting in incorrect read and write operations to other associated memory locations. Attackers can exploit this vulnerability to cause buffer overflow or heap overflow, etc. RHVH features a Cockpit user interface for monitoring the host's resources and performing administrative tasks. The following packages have been upgraded to a later upstream version: redhat-release-virtualization-host (4.3.5), redhat-virtualization-host (4.3.5). 6.6) - x86_64 3. (CVE-2019-14835) Bug Fix(es): * fragmented packets timing out (BZ#1741131) * Backport TCP follow-up for small buffers (BZ#1741143) 4. CVE-2019-14821 Matt Delco reported a race condition in KVM's coalesced MMIO facility, which could lead to out-of-bounds access in the kernel. A local attacker permitted to access /dev/kvm could use this to cause a denial of service (memory corruption or crash) or possibly for privilege escalation. CVE-2019-14835 Peter Pi of Tencent Blade Team discovered a missing bounds check in vhost_net, the network back-end driver for KVM hosts, leading to a buffer overflow when the host begins live migration of a VM. An attacker in control of a VM could use this to cause a denial of service (memory corruption or crash) or possibly for privilege escalation on the host. CVE-2019-15117 Hui Peng and Mathias Payer reported a missing bounds check in the usb-audio driver's descriptor parsing code, leading to a buffer over-read. An attacker able to add USB devices could possibly use this to cause a denial of service (crash). CVE-2019-15118 Hui Peng and Mathias Payer reported unbounded recursion in the usb-audio driver's descriptor parsing code, leading to a stack overflow. An attacker able to add USB devices could use this to cause a denial of service (memory corruption or crash) or possibly for privilege escalation. On the amd64 architecture, and on the arm64 architecture in buster, this is mitigated by a guard page on the kernel stack, so that it is only possible to cause a crash. CVE-2019-15902 Brad Spengler reported that a backporting error reintroduced a spectre-v1 vulnerability in the ptrace subsystem in the ptrace_get_debugreg() function. For the oldstable distribution (stretch), these problems have been fixed in version 4.9.189-3+deb9u1. For the stable distribution (buster), these problems have been fixed in version 4.19.67-2+deb10u1. For the detailed security status of linux please refer to its security tracker page at: https://security-tracker.debian.org/tracker/linux Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@lists.debian.org -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl2K5xlfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQACgkQBUy48xND z0Sj8xAAnBGWzlmy5RyQe8VCE3kkMpwmH/00I5IFpjTbAVvyHzKVYl96YbY1YuAP ID++cBxBElWCQriwCESc5Um/BGpOMmTa3VlkXIVy6uHgwt1Hn+ZW/syFaGt0/brW eKIecVQLyZaV7OOx4Q+J9H5WN1FNKoV3BCsfUFlRqNCUtYQ46X7pN+gyytW4KbZo AEbPkEdUhv2Z6ndq8Z/OJ5cyYms+OonEt08e2qcN0Ig+qRY9l3fgSn/X3tKQiuJj jGKPkd0VYrFzfDKekcboIBZyegahReRe4k+V8I+o/acuQJGR1cV/qCGxboFFI2+s WeSUhaVixP+7HLXyRljFBdvXlAnx/IajEPG+RAVt6zZs1yK+8bVIhai5TarcwbF3 DWQZvpAeLaKgIN4x7s7xDHNJzO9Ea9fhXm/9T1AoaO3wdN2zjOYHLG3YO4TF0PpF rYY9t17uNdAuCxPeQWCciDOiNQVbEmr3+al/78m2VZcBYEI2s1E9fgQJV21rRlv+ fEavwX9OJg6GKcW9v6cyegyf4gfTvjyzIP/rcmn55hiQ9vjVNykkoNUES5Do6sTb /pSSRuUpJtEE+6LnnqbdD0E6l8SC6zgA/+Pu/7BrACxlk9bhYFmVaAwbPPEuRgrz 3d87MB8FEHu4RDGSgomb849wuAXnEVDwM034VtURUSEAXVFQ0dY=Wqdv -----END PGP SIGNATURE----- . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ==================================================================== Red Hat Security Advisory Synopsis: Important: kernel security update Advisory ID: RHSA-2019:2864-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2019:2864 Issue date: 2019-09-23 CVE Names: CVE-2019-14835 ==================================================================== 1. Summary: An update for kernel is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) - noarch, x86_64 Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) - x86_64 Red Hat Enterprise Linux Server EUS (v. 7.6) - noarch, ppc64, ppc64le, s390x, x86_64 Red Hat Enterprise Linux Server Optional EUS (v. 7.6) - ppc64, ppc64le, x86_64 3. Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. (CVE-2019-14835) 4. Solution: For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 The system must be rebooted for this update to take effect. 5. Bugs fixed (https://bugzilla.redhat.com/): 1750727 - CVE-2019-14835 kernel: vhost-net: guest to host kernel escape during migration 6. Package List: Red Hat Enterprise Linux ComputeNode EUS (v. 7.6): Source: kernel-3.10.0-957.35.2.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-957.35.2.el7.noarch.rpm kernel-doc-3.10.0-957.35.2.el7.noarch.rpm x86_64: bpftool-3.10.0-957.35.2.el7.x86_64.rpm kernel-3.10.0-957.35.2.el7.x86_64.rpm kernel-debug-3.10.0-957.35.2.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm kernel-debug-devel-3.10.0-957.35.2.el7.x86_64.rpm kernel-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-957.35.2.el7.x86_64.rpm kernel-devel-3.10.0-957.35.2.el7.x86_64.rpm kernel-headers-3.10.0-957.35.2.el7.x86_64.rpm kernel-tools-3.10.0-957.35.2.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm kernel-tools-libs-3.10.0-957.35.2.el7.x86_64.rpm perf-3.10.0-957.35.2.el7.x86_64.rpm perf-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm python-perf-3.10.0-957.35.2.el7.x86_64.rpm python-perf-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6): x86_64: kernel-debug-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm kernel-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-957.35.2.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-957.35.2.el7.x86_64.rpm perf-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm python-perf-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm Red Hat Enterprise Linux Server EUS (v. 7.6): Source: kernel-3.10.0-957.35.2.el7.src.rpm noarch: kernel-abi-whitelists-3.10.0-957.35.2.el7.noarch.rpm kernel-doc-3.10.0-957.35.2.el7.noarch.rpm ppc64: kernel-3.10.0-957.35.2.el7.ppc64.rpm kernel-bootwrapper-3.10.0-957.35.2.el7.ppc64.rpm kernel-debug-3.10.0-957.35.2.el7.ppc64.rpm kernel-debug-debuginfo-3.10.0-957.35.2.el7.ppc64.rpm kernel-debug-devel-3.10.0-957.35.2.el7.ppc64.rpm kernel-debuginfo-3.10.0-957.35.2.el7.ppc64.rpm kernel-debuginfo-common-ppc64-3.10.0-957.35.2.el7.ppc64.rpm kernel-devel-3.10.0-957.35.2.el7.ppc64.rpm kernel-headers-3.10.0-957.35.2.el7.ppc64.rpm kernel-tools-3.10.0-957.35.2.el7.ppc64.rpm kernel-tools-debuginfo-3.10.0-957.35.2.el7.ppc64.rpm kernel-tools-libs-3.10.0-957.35.2.el7.ppc64.rpm perf-3.10.0-957.35.2.el7.ppc64.rpm perf-debuginfo-3.10.0-957.35.2.el7.ppc64.rpm python-perf-3.10.0-957.35.2.el7.ppc64.rpm python-perf-debuginfo-3.10.0-957.35.2.el7.ppc64.rpm ppc64le: kernel-3.10.0-957.35.2.el7.ppc64le.rpm kernel-bootwrapper-3.10.0-957.35.2.el7.ppc64le.rpm kernel-debug-3.10.0-957.35.2.el7.ppc64le.rpm kernel-debug-debuginfo-3.10.0-957.35.2.el7.ppc64le.rpm kernel-debuginfo-3.10.0-957.35.2.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-957.35.2.el7.ppc64le.rpm kernel-devel-3.10.0-957.35.2.el7.ppc64le.rpm kernel-headers-3.10.0-957.35.2.el7.ppc64le.rpm kernel-tools-3.10.0-957.35.2.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-957.35.2.el7.ppc64le.rpm kernel-tools-libs-3.10.0-957.35.2.el7.ppc64le.rpm perf-3.10.0-957.35.2.el7.ppc64le.rpm perf-debuginfo-3.10.0-957.35.2.el7.ppc64le.rpm python-perf-3.10.0-957.35.2.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-957.35.2.el7.ppc64le.rpm s390x: kernel-3.10.0-957.35.2.el7.s390x.rpm kernel-debug-3.10.0-957.35.2.el7.s390x.rpm kernel-debug-debuginfo-3.10.0-957.35.2.el7.s390x.rpm kernel-debug-devel-3.10.0-957.35.2.el7.s390x.rpm kernel-debuginfo-3.10.0-957.35.2.el7.s390x.rpm kernel-debuginfo-common-s390x-3.10.0-957.35.2.el7.s390x.rpm kernel-devel-3.10.0-957.35.2.el7.s390x.rpm kernel-headers-3.10.0-957.35.2.el7.s390x.rpm kernel-kdump-3.10.0-957.35.2.el7.s390x.rpm kernel-kdump-debuginfo-3.10.0-957.35.2.el7.s390x.rpm kernel-kdump-devel-3.10.0-957.35.2.el7.s390x.rpm perf-3.10.0-957.35.2.el7.s390x.rpm perf-debuginfo-3.10.0-957.35.2.el7.s390x.rpm python-perf-3.10.0-957.35.2.el7.s390x.rpm python-perf-debuginfo-3.10.0-957.35.2.el7.s390x.rpm x86_64: bpftool-3.10.0-957.35.2.el7.x86_64.rpm kernel-3.10.0-957.35.2.el7.x86_64.rpm kernel-debug-3.10.0-957.35.2.el7.x86_64.rpm kernel-debug-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm kernel-debug-devel-3.10.0-957.35.2.el7.x86_64.rpm kernel-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-957.35.2.el7.x86_64.rpm kernel-devel-3.10.0-957.35.2.el7.x86_64.rpm kernel-headers-3.10.0-957.35.2.el7.x86_64.rpm kernel-tools-3.10.0-957.35.2.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm kernel-tools-libs-3.10.0-957.35.2.el7.x86_64.rpm perf-3.10.0-957.35.2.el7.x86_64.rpm perf-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm python-perf-3.10.0-957.35.2.el7.x86_64.rpm python-perf-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm Red Hat Enterprise Linux Server Optional EUS (v. 7.6): ppc64: kernel-debug-debuginfo-3.10.0-957.35.2.el7.ppc64.rpm kernel-debuginfo-3.10.0-957.35.2.el7.ppc64.rpm kernel-debuginfo-common-ppc64-3.10.0-957.35.2.el7.ppc64.rpm kernel-tools-debuginfo-3.10.0-957.35.2.el7.ppc64.rpm kernel-tools-libs-devel-3.10.0-957.35.2.el7.ppc64.rpm perf-debuginfo-3.10.0-957.35.2.el7.ppc64.rpm python-perf-debuginfo-3.10.0-957.35.2.el7.ppc64.rpm ppc64le: kernel-debug-debuginfo-3.10.0-957.35.2.el7.ppc64le.rpm kernel-debug-devel-3.10.0-957.35.2.el7.ppc64le.rpm kernel-debuginfo-3.10.0-957.35.2.el7.ppc64le.rpm kernel-debuginfo-common-ppc64le-3.10.0-957.35.2.el7.ppc64le.rpm kernel-tools-debuginfo-3.10.0-957.35.2.el7.ppc64le.rpm kernel-tools-libs-devel-3.10.0-957.35.2.el7.ppc64le.rpm perf-debuginfo-3.10.0-957.35.2.el7.ppc64le.rpm python-perf-debuginfo-3.10.0-957.35.2.el7.ppc64le.rpm x86_64: kernel-debug-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm kernel-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm kernel-debuginfo-common-x86_64-3.10.0-957.35.2.el7.x86_64.rpm kernel-tools-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm kernel-tools-libs-devel-3.10.0-957.35.2.el7.x86_64.rpm perf-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm python-perf-debuginfo-3.10.0-957.35.2.el7.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/ 7. References: https://access.redhat.com/security/cve/CVE-2019-14835 https://access.redhat.com/security/updates/classification/#important https://access.redhat.com/security/vulnerabilities/kernel-vhost 8. Contact: The Red Hat security contact is <secalert@redhat.com>. More contact details at https://access.redhat.com/security/team/contact/ Copyright 2019 Red Hat, Inc. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIVAwUBXYivj9zjgjWX9erEAQg9iw/6AiSBlimEJBilI4YaU4OMnj6QLpkgPcZv pcXpXjUNS1ckzq5N0ndvDSB1VofK+gCrQscTdOr3Ab+O5fLL+NGgKSC3PDdfnMjM wCQSZkT8j5ZdA0Yl9h0/iqX4i23vbVtjsiTfOdYl591XccoA1MUXDnEHJ+7w5sd3 Ui1tMcfqqGHIHN3S17wfMsnT6gKX1pRvva3E6dB6aGwGWM+ahkQAM27RUzXjM3Yp ZC8Jy+T6jsEFGwQbb/33GHAgWJ9w8eu1DywxyuSmHTCnLv8pX6rRSWDGxwXEcskv eENBocsedY78oEUsF+9IiFrdq3R8Af7A4xVIqbqkRPTQqB4y8peIhbJJUkXQBjNV XNplz+RGFYrVJH7tZZHEzGKebYbFUomXbq3N7wc2V7WDz9kW8CStgd+KjRUa730s TY38a+ff3N1DP+wRRL9Bu4Dv89qLL+dHUvdv6WNBSULM6uuADe4BLjr25F8CL57w qzWCyYwo5VbJwDW0RFAWj828bqrQics1ICuY5SAmaX9AIQpYzwiUnCK+tZvBnJBJ NaeD12H5imuvUZSA7D7olVVojakCuxnM5v+kypaL0jYenYne0Gm9ZecxtSFzo+JW 8LxtVJaTv9urSqfD0ongfJ7YCWchddpk2ldsvd1CnJotHLGsR2J0p3j4JwRSbHWP FkbnNxvOHHI=YEYB -----END PGP SIGNATURE----- -- RHSA-announce mailing list RHSA-announce@redhat.com https://www.redhat.com/mailman/listinfo/rhsa-announce . 7) - aarch64, noarch, ppc64le 3. ========================================================================= Ubuntu Security Notice USN-4135-2 September 18, 2019 linux, linux-aws, linux-azure, linux-lts-trusty, linux-lts-xenial vulnerabilities ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 14.04 ESM - Ubuntu 12.04 ESM Summary: Several security issues were fixed in the Linux kernel. (CVE-2019-14835) It was discovered that the Linux kernel on PowerPC architectures did not properly handle Facility Unavailable exceptions in some situations. A local attacker could use this to expose sensitive information. (CVE-2019-15030) It was discovered that the Linux kernel on PowerPC architectures did not properly handle exceptions on interrupts in some situations. A local attacker could use this to expose sensitive information. (CVE-2019-15031) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 14.04 ESM: linux-image-3.13.0-173-generic 3.13.0-173.224 linux-image-3.13.0-173-generic-lpae 3.13.0-173.224 linux-image-3.13.0-173-lowlatency 3.13.0-173.224 linux-image-3.13.0-173-powerpc-e500 3.13.0-173.224 linux-image-3.13.0-173-powerpc-e500mc 3.13.0-173.224 linux-image-3.13.0-173-powerpc-smp 3.13.0-173.224 linux-image-3.13.0-173-powerpc64-emb 3.13.0-173.224 linux-image-3.13.0-173-powerpc64-smp 3.13.0-173.224 linux-image-4.15.0-1059-azure 4.15.0-1059.64~14.04.1 linux-image-4.4.0-1054-aws 4.4.0-1054.58 linux-image-4.4.0-164-generic 4.4.0-164.192~14.04.1 linux-image-4.4.0-164-generic-lpae 4.4.0-164.192~14.04.1 linux-image-4.4.0-164-lowlatency 4.4.0-164.192~14.04.1 linux-image-4.4.0-164-powerpc-e500mc 4.4.0-164.192~14.04.1 linux-image-4.4.0-164-powerpc-smp 4.4.0-164.192~14.04.1 linux-image-4.4.0-164-powerpc64-emb 4.4.0-164.192~14.04.1 linux-image-4.4.0-164-powerpc64-smp 4.4.0-164.192~14.04.1 linux-image-aws 4.4.0.1054.55 linux-image-azure 4.15.0.1059.45 linux-image-generic 3.13.0.173.184 linux-image-generic-lpae 3.13.0.173.184 linux-image-generic-lpae-lts-xenial 4.4.0.164.143 linux-image-generic-lts-xenial 4.4.0.164.143 linux-image-lowlatency 3.13.0.173.184 linux-image-lowlatency-lts-xenial 4.4.0.164.143 linux-image-powerpc-e500 3.13.0.173.184 linux-image-powerpc-e500mc 3.13.0.173.184 linux-image-powerpc-e500mc-lts-xenial 4.4.0.164.143 linux-image-powerpc-smp 3.13.0.173.184 linux-image-powerpc-smp-lts-xenial 4.4.0.164.143 linux-image-powerpc64-emb 3.13.0.173.184 linux-image-powerpc64-emb-lts-xenial 4.4.0.164.143 linux-image-powerpc64-smp 3.13.0.173.184 linux-image-powerpc64-smp-lts-xenial 4.4.0.164.143 linux-image-server 3.13.0.173.184 linux-image-virtual 3.13.0.173.184 linux-image-virtual-lts-xenial 4.4.0.164.143 Ubuntu 12.04 ESM: linux-image-3.13.0-173-generic 3.13.0-173.224~12.04.1 linux-image-3.13.0-173-generic-lpae 3.13.0-173.224~12.04.1 linux-image-3.13.0-173-lowlatency 3.13.0-173.224~12.04.1 linux-image-3.2.0-143-generic 3.2.0-143.190 linux-image-3.2.0-143-generic-pae 3.2.0-143.190 linux-image-3.2.0-143-highbank 3.2.0-143.190 linux-image-3.2.0-143-omap 3.2.0-143.190 linux-image-3.2.0-143-powerpc-smp 3.2.0-143.190 linux-image-3.2.0-143-powerpc64-smp 3.2.0-143.190 linux-image-3.2.0-143-virtual 3.2.0-143.190 linux-image-generic 3.2.0.143.158 linux-image-generic-lpae-lts-trusty 3.13.0.173.161 linux-image-generic-lts-trusty 3.13.0.173.161 linux-image-generic-pae 3.2.0.143.158 linux-image-highbank 3.2.0.143.158 linux-image-omap 3.2.0.143.158 linux-image-powerpc 3.2.0.143.158 linux-image-powerpc-smp 3.2.0.143.158 linux-image-powerpc64-smp 3.2.0.143.158 linux-image-server 3.2.0.143.158 linux-image-virtual 3.2.0.143.158 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. (CVE-2019-14835) Update instructions: The problem can be corrected by updating your livepatches to the following versions: | Kernel | Version | flavors | |--------------------------+----------+--------------------------| | 4.4.0-148.174 | 56.1 | lowlatency, generic | | 4.4.0-150.176 | 56.1 | generic, lowlatency | | 4.4.0-151.178 | 56.1 | lowlatency, generic | | 4.4.0-154.181 | 56.1 | lowlatency, generic | | 4.4.0-157.185 | 56.1 | lowlatency, generic | | 4.4.0-159.187 | 56.1 | lowlatency, generic | | 4.4.0-161.189 | 56.1 | lowlatency, generic | | 4.15.0-50.54 | 56.1 | generic, lowlatency | | 4.15.0-50.54~16.04.1 | 56.1 | generic, lowlatency | | 4.15.0-51.55 | 56.1 | generic, lowlatency | | 4.15.0-51.55~16.04.1 | 56.1 | generic, lowlatency | | 4.15.0-52.56 | 56.1 | lowlatency, generic | | 4.15.0-52.56~16.04.1 | 56.1 | generic, lowlatency | | 4.15.0-54.58 | 56.1 | generic, lowlatency | | 4.15.0-54.58~16.04.1 | 56.1 | generic, lowlatency | | 4.15.0-55.60 | 56.1 | generic, lowlatency | | 4.15.0-58.64 | 56.1 | generic, lowlatency | | 4.15.0-58.64~16.04.1 | 56.1 | lowlatency, generic | | 4.15.0-60.67 | 56.1 | lowlatency, generic | | 4.15.0-60.67~16.04.1 | 56.1 | generic, lowlatency | | 4.15.0-62.69 | 56.1 | generic, lowlatency | | 4.15.0-62.69~16.04.1 | 56.1 | lowlatency, generic | Support Information: Kernels older than the levels listed below do not receive livepatch updates. Please upgrade your kernel as soon as possible. | Series | Version | Flavors | |------------------+------------------+--------------------------| | Ubuntu 18.04 LTS | 4.15.0-50 | generic lowlatency | | Ubuntu 16.04 LTS | 4.15.0-50 | generic lowlatency | | Ubuntu 14.04 LTS | 4.4.0-148 | generic lowlatency | | Ubuntu 16.04 LTS | 4.4.0-148 | generic lowlatency | References: CVE-2019-14835 -- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

AFFECTED PRODUCTS

CVSS

PROBLEMTYPE DATA

THREAT TYPE

local

TYPE

buffer error

PATCH

EXTERNAL IDS

REFERENCES

CREDITS

Ubuntu, The vulnerability is caused by Linux Public disclosure by the kernel community. ,Red Hat

SOURCES

LAST UPDATE DATE

2024-11-23T21:21:16.327000+00:00

SOURCES UPDATE DATE

SOURCES RELEASE DATE