UBUNTU-CVE-2018-5344

Details

In the Linux kernel through 4.14.13, drivers/block/loop.c mishandles lo_release serialization, which allows attackers to cause a denial of service (__lock_acquire use-after-free) or possibly have unspecified other impact.

Affected Packages(26 packages)

linux

Ubuntu 14.04 LTS

Fixed in:

3.13.0-142.191

linux-aws

Ubuntu 14.04 LTS

Fixed in:

4.4.0-1016.16

linux-lts-xenial

Ubuntu 14.04 LTS

Fixed in:

4.4.0-119.143~14.04.1

linux

Ubuntu 16.04 LTS

Fixed in:

4.4.0-119.143

linux-aws

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1054.63

linux-azure

Ubuntu 16.04 LTS

Fixed in:

4.13.0-1014.17

linux-gcp

Ubuntu 16.04 LTS

Fixed in:

4.13.0-1012.16

linux-hwe

Ubuntu 16.04 LTS

Fixed in:

4.13.0-41.46~16.04.1

linux-kvm

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1020.25

linux-oem

Ubuntu 16.04 LTS

Fixed in:

4.13.0-1022.24

References

REPORT

http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5

REPORT

https://github.com/torvalds/linux/commit/ae6650163c66a7eff1acd6eb8b0f752dcfa8eba5

REPORT

https://ubuntu.com/security/CVE-2018-5344

ADVISORY

https://ubuntu.com/security/notices/USN-3583-1

ADVISORY

https://ubuntu.com/security/notices/USN-3583-2

ADVISORY

https://ubuntu.com/security/notices/USN-3617-1

ADVISORY

https://ubuntu.com/security/notices/USN-3617-2

ADVISORY

https://ubuntu.com/security/notices/USN-3617-3

ADVISORY

https://ubuntu.com/security/notices/USN-3619-1

ADVISORY

https://ubuntu.com/security/notices/USN-3619-2

ADVISORY

https://ubuntu.com/security/notices/USN-3632-1

REPORT

https://www.cve.org/CVERecord?id=CVE-2018-5344