UBUNTU-CVE-2018-1000004

Details

In the Linux kernel 4.12, 3.10, 2.6 and possibly earlier versions a race condition vulnerability exists in the sound system, this can lead to a deadlock and denial of service condition.

Affected Packages(25 packages)

linux

Ubuntu 14.04 LTS

Fixed in:

3.13.0-161.211

linux-aws

Ubuntu 14.04 LTS

Fixed in:

4.4.0-1017.17

linux-lts-xenial

Ubuntu 14.04 LTS

Fixed in:

4.4.0-121.145~14.04.1

linux

Ubuntu 16.04 LTS

Fixed in:

4.4.0-121.145

linux-aws

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1055.64

linux-azure

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1013.13~16.04.2

linux-gcp

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1014.14~16.04.1

linux-hwe

Ubuntu 16.04 LTS

Fixed in:

4.15.0-24.26~16.04.1

linux-kvm

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1021.26

linux-raspi2

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1087.95

References

REPORT

http://www.openwall.com/lists/oss-security/2018/01/16/1

REPORT

https://github.com/torvalds/linux/commit/b3defb791b26ea0683a93a4f49c77ec45ec96f10

REPORT

https://ubuntu.com/security/CVE-2018-1000004

ADVISORY

https://ubuntu.com/security/notices/USN-3631-1

ADVISORY

https://ubuntu.com/security/notices/USN-3631-2

ADVISORY

https://ubuntu.com/security/notices/USN-3798-1

ADVISORY

https://ubuntu.com/security/notices/USN-3798-2

REPORT

https://www.cve.org/CVERecord?id=CVE-2018-1000004