USN-3910-1: linux Ubuntu

Vulnerability summary

USN-3910-1 is a vulnerability in linux Ubuntu with no CVSS score yet.

Timeline

1. 15-03-2019
   PublishedVulnerability first disclosed.
2. 03-06-2026
   Last modifiedVulnerability information updated.

Description

linux, linux-aws, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities It was discovered that the f2fs filesystem implementation in the Linux kernel did not handle the noflush_merge mount option correctly. An attacker could use this to cause a denial of service (system crash). (CVE-2017-18241) It was discovered that the procfs filesystem did not properly handle processes mapping some memory elements onto files. A local attacker could use this to block utilities that examine the procfs filesystem to report operating system state, such as ps(1). (CVE-2018-1120) Hui Peng and Mathias Payer discovered that the Option USB High Speed driver in the Linux kernel did not properly validate metadata received from the device. A physically proximate attacker could use this to cause a denial of service (system crash). (CVE-2018-19985) It was discovered that multiple integer overflows existed in the hugetlbfs implementation in the Linux kernel. A local attacker could use this to cause a denial of service (system crash). (CVE-2018-7740) Jann Horn discovered a race condition in the fork() system call in the Linux kernel. A local attacker could use this to gain access to services that cache authorizations. (CVE-2019-6133)

No weakness data has been published for this record.