Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux kernel allows device tracking and crashes
published 7 years ago
Summary
Various Linux kernel components—including networking, floppy drive handling, and virtual network drivers—contain weaknesses that let attackers either identify specific machines or cause system crashes. Some of these issues can be triggered remotely, while others require local access. Updating to the latest kernel packages from your Linux distribution will address these problems.
What to do
- Update canonical linux-azure to version 5.0.0-1018.19~18.04.1.
- Update canonical linux-gke-5.0 to version 5.0.0-1015.15~18.04.1.
- Update canonical linux-hwe to version 5.0.0-27.28~18.04.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:18.04:LTS | canonical | linux-azure |
< 5.0.0-1018.19~18.04.1 Fix: upgrade to 5.0.0-1018.19~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-5.0 |
< 5.0.0-1015.15~18.04.1 Fix: upgrade to 5.0.0-1015.15~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe |
< 5.0.0-27.28~18.04.1 Fix: upgrade to 5.0.0-27.28~18.04.1
|
Original advisory text
linux, linux-azure, linux-gcp, linux-gke-5.0, linux-hwe, linux-kvm, linux-raspi2, linux-snapdragon vulnerabilities
Amit Klein and Benny Pinkas discovered that the Linux kernel did not
sufficiently randomize IP ID values generated for connectionless networking
protocols. A remote attacker could use this to track particular Linux
devices. (CVE-2019-10638)
Praveen Pandey discovered that the Linux kernel did not properly validate
sent signals in some situations on PowerPC systems with transactional
memory disabled. A local attacker could use this to cause a denial of
service. (CVE-2019-13648)
It was discovered that the floppy driver in the Linux kernel did not
properly validate meta data, leading to a buffer overread. A local attacker
could use this to cause a denial of service (system crash).
(CVE-2019-14283)
It was discovered that the floppy driver in the Linux kernel did not
properly validate ioctl() calls, leading to a division-by-zero. A local
attacker could use this to cause a denial of service (system crash).
(CVE-2019-14284)
Jason Wang discovered that an infinite loop vulnerability existed in the
virtio net driver in the Linux kernel. A local attacker in a guest VM could
possibly use this to cause a denial of service in the host system.
(CVE-2019-3900)
sufficiently randomize IP ID values generated for connectionless networking
protocols. A remote attacker could use this to track particular Linux
devices. (CVE-2019-10638)
Praveen Pandey discovered that the Linux kernel did not properly validate
sent signals in some situations on PowerPC systems with transactional
memory disabled. A local attacker could use this to cause a denial of
service. (CVE-2019-13648)
It was discovered that the floppy driver in the Linux kernel did not
properly validate meta data, leading to a buffer overread. A local attacker
could use this to cause a denial of service (system crash).
(CVE-2019-14283)
It was discovered that the floppy driver in the Linux kernel did not
properly validate ioctl() calls, leading to a division-by-zero. A local
attacker could use this to cause a denial of service (system crash).
(CVE-2019-14284)
Jason Wang discovered that an infinite loop vulnerability existed in the
virtio net driver in the Linux kernel. A local attacker in a guest VM could
possibly use this to cause a denial of service in the host system.
(CVE-2019-3900)
References
- https://ubuntu.com/security/notices/USN-4114-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2019-3900 Third Party Advisory
- https://ubuntu.com/security/CVE-2019-10638 Third Party Advisory
- https://ubuntu.com/security/CVE-2019-13648 Third Party Advisory
- https://ubuntu.com/security/CVE-2019-14283 Third Party Advisory
- https://ubuntu.com/security/CVE-2019-14284 Third Party Advisory
Timeline
Published2 Sep 2019
Updated8 Sep 2026
First seen8 Sep 2026
Sources
USN-4114-1 · OSV
Track software like this
Free during beta