{"schemaVersion":3,"id":"USN-3910-2","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"linux-lts-xenial, linux-aws vulnerabilities\n\nUSN-3910-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04\nLTS. This update provides the corresponding updates for the Linux\nHardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu\n14.04 LTS.\n\nIt was discovered that the f2fs filesystem implementation in the Linux\nkernel did not handle the noflush_merge mount option correctly. An attacker\ncould use this to cause a denial of service (system crash).\n(CVE-2017-18241)\n\nIt was discovered that the procfs filesystem did not properly handle\nprocesses mapping some memory elements onto files. A local attacker could\nuse this to block utilities that examine the procfs filesystem to report\noperating system state, such as ps(1). (CVE-2018-1120)\n\nHui Peng and Mathias Payer discovered that the Option USB High Speed driver\nin the Linux kernel did not properly validate metadata received from the\ndevice. A physically proximate attacker could use this to cause a denial of\nservice (system crash). (CVE-2018-19985)\n\nIt was discovered that multiple integer overflows existed in the hugetlbfs\nimplementation in the Linux kernel. A local attacker could use this to\ncause a denial of service (system crash). (CVE-2018-7740)\n\nJann Horn discovered a race condition in the fork() system call in the\nLinux kernel. A local attacker could use this to gain access to services\nthat cache authorizations. (CVE-2019-6133)","dates":{"published":"2019-03-15T22:03:29.000Z","modified":"2026-06-03T14:04:16.715Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"ubuntu","product":"linux-aws","name":"linux-aws","label":"linux-aws","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-aws","purlType":"deb","versions":[{"text":"< 4.4.0-1039.42","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4.0-1039.42","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"linux-lts-xenial","name":"linux-lts-xenial","label":"linux-lts-xenial","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/linux-lts-xenial","purlType":"deb","versions":[{"text":"< 4.4.0-143.169~14.04.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4.0-143.169~14.04.2","eol":null,"hubHref":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://ubuntu.com/security/notices/USN-3910-2","label":"ubuntu.com/security/notices/USN-3910-2","hostname":"ubuntu.com","tags":["Advisory"]},{"url":"https://ubuntu.com/security/CVE-2017-18241","label":"ubuntu.com/security/CVE-2017-18241","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-1120","label":"ubuntu.com/security/CVE-2018-1120","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-7740","label":"ubuntu.com/security/CVE-2018-7740","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2018-19985","label":"ubuntu.com/security/CVE-2018-19985","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://ubuntu.com/security/CVE-2019-6133","label":"ubuntu.com/security/CVE-2019-6133","hostname":"ubuntu.com","tags":["REPORT"]}],"lineage":{"upstream":["CVE-2017-18241","CVE-2018-1120","CVE-2018-19985","CVE-2018-7740","CVE-2019-6133"],"downstream":[],"duplicates":[],"related":["CVE-2017-18241","CVE-2018-1120","CVE-2018-19985","CVE-2018-7740","CVE-2019-6133"]},"timeline":[{"kind":"published","date":"2019-03-15T22:03:29.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-06-03T14:04:16.715Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T02:13:15.890Z","stale":false,"partial":false}}