{"schemaVersion":3,"id":"USN-3405-2","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"linux-lts-xenial vulnerabilities\n\nUSN-3405-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04\nLTS. This update provides the corresponding updates for the Linux\nHardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu\n14.04 LTS.\n\nIt was discovered that a use-after-free vulnerability existed in the POSIX\nmessage queue implementation in the Linux kernel. A local attacker could\nuse this to cause a denial of service (system crash) or possibly execute\narbitrary code. (CVE-2017-11176)\n\nHuang Weller discovered that the ext4 filesystem implementation in the\nLinux kernel mishandled a needs-flushing-before-commit list. A local\nattacker could use this to expose sensitive information. (CVE-2017-7495)\n\nIt was discovered that a buffer overflow existed in the Broadcom FullMAC\nWLAN driver in the Linux kernel. A local attacker could use this to cause a\ndenial of service (system crash) or possibly execute arbitrary code.\n(CVE-2017-7541)\n\nIt was discovered that the Linux kernel did not honor the UEFI secure boot\nmode when performing a kexec operation. A local attacker could use this to\nbypass secure boot restrictions. (CVE-2015-7837)","dates":{"published":"2017-08-28T22:45:40.000Z","modified":"2026-06-03T14:03:58.948Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"linux-lts-xenial","name":"linux-lts-xenial","label":"linux-lts-xenial","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-lts-xenial","purlType":"deb","versions":[{"text":"< 4.4.0-93.116~14.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4.0-93.116~14.04.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-3405-2","label":"ubuntu.com/security/notices/USN-3405-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-7837","label":"ubuntu.com/security/CVE-2015-7837","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2017-7495","label":"ubuntu.com/security/CVE-2017-7495","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2017-7541","label":"ubuntu.com/security/CVE-2017-7541","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2017-11176","label":"ubuntu.com/security/CVE-2017-11176","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2015-7837","CVE-2017-11176","CVE-2017-7495","CVE-2017-7541"],"downstream":[],"duplicates":[],"related":["CVE-2015-7837","CVE-2017-11176","CVE-2017-7495","CVE-2017-7541"]},"timeline":[{"kind":"published","date":"2017-08-28T22:45:40.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-03T14:03:58.948Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T14:20:59.248Z","stale":false,"partial":false}}