USN-3630-2

Details

USN-3630-1 fixed a vulnerability in the Linux kernel for Ubuntu 17.10. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 17.10 for Ubuntu 16.04 LTS.

It was discovered that the Broadcom UniMAC MDIO bus controller driver in the Linux kernel did not properly validate device resources. A local attacker could use this to cause a denial of service (system crash).

Affected Packages

Ubuntu:16.04:LTSlinux-gcp

Fixed in:

4.13.0-1013.17

Ubuntu:16.04:LTSlinux-hwe

Fixed in:

4.13.0-39.44~16.04.1

Ubuntu:16.04:LTSlinux-oem

Fixed in:

4.13.0-1024.27

References

REPORThttps://ubuntu.com/security/CVE-2018-8043 ADVISORYhttps://ubuntu.com/security/notices/USN-3630-2

USN-3630-2

Details

Affected Packages

References

Upstream

Ecosystems

Timeline