UBUNTU-CVE-2019-17055

Details

base_sock_create in drivers/isdn/mISDN/socket.c in the AF_ISDN network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21.

Affected Packages(44 packages)

linux

Ubuntu 16.04 LTS

Fixed in:

4.4.0-168.197

linux-aws

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1098.109

linux-aws-hwe

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1054.56~16.04.1

linux-azure

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1063.68

linux-gcp

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1049.52

linux-hwe

Ubuntu 16.04 LTS

Fixed in:

4.15.0-69.78~16.04.1

linux-kvm

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1062.69

linux-oracle

Ubuntu 16.04 LTS

Fixed in:

4.15.0-1029.32~16.04.1

linux-raspi2

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1125.134

linux-snapdragon

Ubuntu 16.04 LTS

Fixed in:

4.4.0-1129.137

References

REPORT

https://git.kernel.org/linus/b91ee4aa2a2199ba4d4650706c272985a5a32d80

REPORT

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0edc3f703f7bcaf550774b5d43ab727bcd0fe06b

REPORT

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b91ee4aa2a2199ba4d4650706c272985a5a32d80

REPORT

https://ubuntu.com/security/CVE-2019-17055

ADVISORY

https://ubuntu.com/security/notices/USN-4184-1

ADVISORY

https://ubuntu.com/security/notices/USN-4185-1

ADVISORY

https://ubuntu.com/security/notices/USN-4185-2

ADVISORY

https://ubuntu.com/security/notices/USN-4186-1

ADVISORY

https://ubuntu.com/security/notices/USN-4186-2

REPORT

https://www.cve.org/CVERecord?id=CVE-2019-17055