UBUNTU-CVE-2018-1108

Details

kernel drivers before version 4.17-rc1 are vulnerable to a weakness in the Linux kernel's implementation of random seed data. Programs, early in the boot sequence, could use the data allocated for the seed before it was sufficiently generated.

Affected Packages

linux-azure

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1022.22~16.04.1

linux-gcp

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1018.19~16.04.2

linux-hwe

Ubuntu 16.04 LTS

Fixed in:

4.15.0-33.36~16.04.1

linux

Ubuntu 18.04 LTS

Fixed in:

4.15.0-33.36

linux-aws

Ubuntu 18.04 LTS

Fixed in:

4.15.0-1020.20

linux-azure

Ubuntu 18.04 LTS

Fixed in:

4.15.0-1022.23

linux-gcp

Ubuntu 18.04 LTS

Fixed in:

4.15.0-1018.19

linux-kvm

Ubuntu 18.04 LTS

Fixed in:

4.15.0-1020.20

linux-oem

Ubuntu 18.04 LTS

Fixed in:

4.15.0-1017.20

linux-raspi2

Ubuntu 18.04 LTS

Fixed in:

4.15.0-1021.23

References

REPORT

https://bugs.chromium.org/p/project-zero/issues/detail?id=1559

REPORT

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=43838a23a05fbd13e47d750d3dfd77001536dd33

REPORT

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=8ef35c866f8862df074a49a93b0309725812dea8

REPORT

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dc12baacb95f205948f64dc936a47d89ee110117

REPORT

https://ubuntu.com/security/CVE-2018-1108

ADVISORY

https://ubuntu.com/security/notices/USN-3752-1

ADVISORY

https://ubuntu.com/security/notices/USN-3752-2

ADVISORY

https://ubuntu.com/security/notices/USN-3752-3

REPORT

https://www.cve.org/CVERecord?id=CVE-2018-1108