{"schemaVersion":3,"id":"USN-3509-4","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"linux-lts-xenial, linux-aws regression\n\nUSN-3509-2 fixed vulnerabilities in the Linux Hardware Enablement\nkernel for Ubuntu 14.04 LTS.  Unfortunately, it also introduced a\nregression that prevented the Ceph network filesystem from being\nused. This update fixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n Mohamed Ghannam discovered that a use-after-free vulnerability existed in\n the Netlink subsystem (XFRM) in the Linux kernel. A local attacker could\n use this to cause a denial of service (system crash) or possibly execute\n arbitrary code. (CVE-2017-16939)\n\n It was discovered that the Linux kernel did not properly handle copy-on-\n write of transparent huge pages. A local attacker could use this to cause a\n denial of service (application crashes) or possibly gain administrative\n privileges. (CVE-2017-1000405)\n\n Fan Wu, Haoran Qiu, and Shixiong Zhao discovered that the associative array\n implementation in the Linux kernel sometimes did not properly handle adding\n a new entry. A local attacker could use this to cause a denial of service\n (system crash). (CVE-2017-12193)\n\n Andrey Konovalov discovered an out-of-bounds read in the GTCO digitizer USB\n driver for the Linux kernel. A physically proximate attacker could use this\n to cause a denial of service (system crash) or possibly execute arbitrary\n code. (CVE-2017-16643)","dates":{"published":"2017-12-15T09:07:58.000Z","modified":"2026-02-10T04:41:16.000Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"linux-aws","name":"linux-aws","label":"linux-aws","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-aws","purlType":"deb","versions":[{"text":"< 4.4.0-1006.6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4.0-1006.6","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-lts-xenial","name":"linux-lts-xenial","label":"linux-lts-xenial","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-lts-xenial","purlType":"deb","versions":[{"text":"< 4.4.0-104.127~14.04.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4.0-104.127~14.04.1","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-3509-4","label":"ubuntu.com/security/notices/USN-3509-4","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://launchpad.net/bugs/1737033","label":"launchpad.net/bugs/1737033","hostname":"launchpad.net","tags":["REPORT"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2017-12-15T09:07:58.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-10T04:41:16.000Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T01:34:35.394Z","stale":false,"partial":false}}