=========================================================================Kernel Live Patch Security Notice 0064-1
March 19, 2020

linux vulnerability
=========================================================================
A security issue affects these releases of Ubuntu:

| Series           | Base kernel  | Arch     | flavors          |
|------------------+--------------+----------+------------------|
| Ubuntu 18.04 LTS | 4.15.0       | amd64    | aws              |
| Ubuntu 18.04 LTS | 4.15.0       | amd64    | generic          |
| Ubuntu 18.04 LTS | 4.15.0       | amd64    | lowlatency       |
| Ubuntu 18.04 LTS | 4.15.0       | amd64    | oem              |
| Ubuntu 18.04 LTS | 5.0.0        | amd64    | azure            |
| Ubuntu 18.04 LTS | 5.0.0        | amd64    | gcp              |
| Ubuntu 14.04 LTS | 4.4.0        | amd64    | generic          |
| Ubuntu 14.04 LTS | 4.4.0        | amd64    | lowlatency       |
| Ubuntu 16.04 LTS | 4.4.0        | amd64    | aws              |
| Ubuntu 16.04 LTS | 4.4.0        | amd64    | generic          |
| Ubuntu 16.04 LTS | 4.4.0        | amd64    | lowlatency       |
| Ubuntu 16.04 LTS | 4.15.0       | amd64    | azure            |
| Ubuntu 16.04 LTS | 4.15.0       | amd64    | generic          |
| Ubuntu 16.04 LTS | 4.15.0       | amd64    | lowlatency       |

Summary:

Several security issues were fixed in the kernel.

Software Description:
- linux: Linux kernel

Details:

Paulo Bonzini discovered that the KVM hypervisor implementation in the
Linux kernel could improperly let a nested (level 2) guest access the
resources of a parent (level 1) guest in certain situations. An attacker
could use this to expose sensitive information. (CVE-2020-2732)

Update instructions:

The problem can be corrected by updating your livepatches to the following
versions:

| Kernel                   | Version  | flavors                  |
|--------------------------+----------+--------------------------|
| 4.4.0-168.197            | 64.2     | generic, lowlatency      |
| 4.4.0-168.197~14.04.1    | 64.2     | lowlatency, generic      |
| 4.4.0-169.198            | 64.2     | generic, lowlatency      |
| 4.4.0-169.198~14.04.1    | 64.2     | lowlatency, generic      |
| 4.4.0-170.199            | 64.2     | lowlatency, generic      |
| 4.4.0-170.199~14.04.1    | 64.2     | lowlatency, generic      |
| 4.4.0-171.200            | 64.2     | lowlatency, generic      |
| 4.4.0-171.200~14.04.1    | 64.2     | generic, lowlatency      |
| 4.4.0-173.203            | 64.2     | generic, lowlatency      |
| 4.4.0-173.203~14.04.1    | 64.2     | generic, lowlatency      |
| 4.4.0-174.204            | 64.2     | lowlatency, generic      |
| 4.4.0-1098.109           | 64.2     | aws                      |
| 4.4.0-1099.110           | 64.2     | aws                      |
| 4.4.0-1100.111           | 64.2     | aws                      |
| 4.4.0-1101.112           | 64.2     | aws                      |
| 4.4.0-1102.113           | 64.2     | aws                      |
| 4.15.0-69.78             | 64.2     | generic, lowlatency      |
| 4.15.0-69.78~16.04.1     | 64.2     | lowlatency, generic      |
| 4.15.0-70.79             | 64.2     | lowlatency, generic      |
| 4.15.0-70.79~16.04.1     | 64.2     | generic, lowlatency      |
| 4.15.0-72.81             | 64.2     | generic, lowlatency      |
| 4.15.0-72.81~16.04.1     | 64.2     | generic, lowlatency      |
| 4.15.0-74.83~16.04.1     | 64.2     | lowlatency, generic      |
| 4.15.0-74.84             | 64.2     | generic, lowlatency      |
| 4.15.0-76.86             | 64.2     | generic, lowlatency      |
| 4.15.0-76.86~16.04.1     | 64.2     | lowlatency, generic      |
| 4.15.0-88.88             | 64.2     | generic, lowlatency      |
| 4.15.0-88.88~16.04.1     | 64.2     | lowlatency, generic      |
| 4.15.0-1054.56           | 64.2     | aws                      |
| 4.15.0-1056.58           | 64.2     | aws                      |
| 4.15.0-1057.59           | 64.2     | aws                      |
| 4.15.0-1058.60           | 64.2     | aws                      |
| 4.15.0-1060.62           | 64.2     | aws                      |
| 4.15.0-1063.68           | 64.2     | azure                    |
| 4.15.0-1063.72           | 64.2     | oem                      |
| 4.15.0-1064.69           | 64.2     | azure                    |
| 4.15.0-1064.73           | 64.2     | oem                      |
| 4.15.0-1065.75           | 64.2     | oem                      |
| 4.15.0-1066.71           | 64.2     | azure                    |
| 4.15.0-1066.76           | 64.2     | oem                      |
| 4.15.0-1067.72           | 64.2     | azure                    |
| 4.15.0-1067.77           | 64.2     | oem                      |
| 4.15.0-1069.74           | 64.2     | azure                    |
| 4.15.0-1069.79           | 64.2     | oem                      |
| 4.15.0-1071.76           | 64.2     | azure                    |
| 4.15.0-1073.83           | 64.2     | oem                      |
| 5.0.0-1025.26~18.04.1    | 64.5     | gcp                      |
| 5.0.0-1025.27~18.04.1    | 64.4     | azure                    |
| 5.0.0-1027.29~18.04.1    | 64.4     | azure                    |
| 5.0.0-1028.29~18.04.1    | 64.5     | gcp                      |
| 5.0.0-1028.30~18.04.1    | 64.4     | azure                    |
| 5.0.0-1029.30~18.04.1    | 64.5     | gcp                      |
| 5.0.0-1029.31~18.04.1    | 64.4     | azure                    |

Support Information:

Kernels older than the levels listed below do not receive livepatch
updates. Please upgrade your kernel as soon as possible.

| Series           | Version          | Flavors                  |
|------------------+------------------+--------------------------|
| Ubuntu 18.04 LTS | 4.15.0-1054      | aws                      |
| Ubuntu 16.04 LTS | 4.4.0-1098       | aws                      |
| Ubuntu 18.04 LTS | 5.0.0-1025       | azure                    |
| Ubuntu 16.04 LTS | 4.15.0-1063      | azure                    |
| Ubuntu 18.04 LTS | 4.15.0-69        | generic lowlatency       |
| Ubuntu 18.04 LTS | 5.0.0-1025       | gcp                      |
| Ubuntu 16.04 LTS | 4.15.0-69        | generic lowlatency       |
| Ubuntu 14.04 LTS | 4.4.0-168        | generic lowlatency       |
| Ubuntu 18.04 LTS | 4.15.0-1063      | oem                      |
| Ubuntu 16.04 LTS | 4.4.0-168        | generic lowlatency       |

References:
  CVE-2020-2732


-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

Ubuntu 0064-1: Linux kernel vulnerability

March 19, 2020
Several security issues were fixed in the kernel.

Summary

Update Instructions

The problem can be corrected by updating your livepatches to the following versions: | Kernel | Version | flavors | |--------------------------+----------+--------------------------| | 4.4.0-168.197 | 64.2 | generic, lowlatency | | 4.4.0-168.197~14.04.1 | 64.2 | lowlatency, generic | | 4.4.0-169.198 | 64.2 | generic, lowlatency | | 4.4.0-169.198~14.04.1 | 64.2 | lowlatency, generic | | 4.4.0-170.199 | 64.2 | lowlatency, generic | | 4.4.0-170.199~14.04.1 | 64.2 | lowlatency, generic | | 4.4.0-171.200 | 64.2 | lowlatency, generic | | 4.4.0-171.200~14.04.1 | 64.2 | generic, lowlatency | | 4.4.0-173.203 | 64.2 | generic, lowlatency | | 4.4.0-173.203~14.04.1 | 64.2 | generic, lowlatency | | 4.4.0-174.204 | 64.2 | lowlatency, generic | | 4.4.0-1098.109 | 64.2 | aws | | 4.4.0-1099.110 | 64.2 | aws | | 4.4.0-1100.111 | 64.2 | aws | | 4.4.0-1101.112 | 64.2 | aws | | 4.4.0-1102.113 | 64.2 | aws | | 4.15.0-69.78 | 64.2 | generic, lowlatency | | 4.15.0-69.78~16.04.1 | 64.2 | lowlatency, generic | | 4.15.0-70.79 | 64.2 | lowlatency, generic | | 4.15.0-70.79~16.04.1 | 64.2 | generic, lowlatency | | 4.15.0-72.81 | 64.2 | generic, lowlatency | | 4.15.0-72.81~16.04.1 | 64.2 | generic, lowlatency | | 4.15.0-74.83~16.04.1 | 64.2 | lowlatency, generic | | 4.15.0-74.84 | 64.2 | generic, lowlatency | | 4.15.0-76.86 | 64.2 | generic, lowlatency | | 4.15.0-76.86~16.04.1 | 64.2 | lowlatency, generic | | 4.15.0-88.88 | 64.2 | generic, lowlatency | | 4.15.0-88.88~16.04.1 | 64.2 | lowlatency, generic | | 4.15.0-1054.56 | 64.2 | aws | | 4.15.0-1056.58 | 64.2 | aws | | 4.15.0-1057.59 | 64.2 | aws | | 4.15.0-1058.60 | 64.2 | aws | | 4.15.0-1060.62 | 64.2 | aws | | 4.15.0-1063.68 | 64.2 | azure | | 4.15.0-1063.72 | 64.2 | oem | | 4.15.0-1064.69 | 64.2 | azure | | 4.15.0-1064.73 | 64.2 | oem | | 4.15.0-1065.75 | 64.2 | oem | | 4.15.0-1066.71 | 64.2 | azure | | 4.15.0-1066.76 | 64.2 | oem | | 4.15.0-1067.72 | 64.2 | azure | | 4.15.0-1067.77 | 64.2 | oem | | 4.15.0-1069.74 | 64.2 | azure | | 4.15.0-1069.79 | 64.2 | oem | | 4.15.0-1071.76 | 64.2 | azure | | 4.15.0-1073.83 | 64.2 | oem | | 5.0.0-1025.26~18.04.1 | 64.5 | gcp | | 5.0.0-1025.27~18.04.1 | 64.4 | azure | | 5.0.0-1027.29~18.04.1 | 64.4 | azure | | 5.0.0-1028.29~18.04.1 | 64.5 | gcp | | 5.0.0-1028.30~18.04.1 | 64.4 | azure | | 5.0.0-1029.30~18.04.1 | 64.5 | gcp | | 5.0.0-1029.31~18.04.1 | 64.4 | azure | Support Information: Kernels older than the levels listed below do not receive livepatch updates. Please upgrade your kernel as soon as possible. | Series | Version | Flavors | |------------------+------------------+--------------------------| | Ubuntu 18.04 LTS | 4.15.0-1054 | aws | | Ubuntu 16.04 LTS | 4.4.0-1098 | aws | | Ubuntu 18.04 LTS | 5.0.0-1025 | azure | | Ubuntu 16.04 LTS | 4.15.0-1063 | azure | | Ubuntu 18.04 LTS | 4.15.0-69 | generic lowlatency | | Ubuntu 18.04 LTS | 5.0.0-1025 | gcp | | Ubuntu 16.04 LTS | 4.15.0-69 | generic lowlatency | | Ubuntu 14.04 LTS | 4.4.0-168 | generic lowlatency | | Ubuntu 18.04 LTS | 4.15.0-1063 | oem | | Ubuntu 16.04 LTS | 4.4.0-168 | generic lowlatency |

References

CVE-2020-2732

--

ubuntu-security-announce mailing list

ubuntu-security-announce@lists.ubuntu.com

Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce

Severity
March 19, 2020

Package Information

Related News

The End of the Road for Linux 6.11: A Call to Upgrade to Kernel 6.12
3 - 5 min read
The Linux kernel community recently issued an EOL announcement regarding the 6.11 kernel series, urging sysadmins to upgrade quickly to 6.12 . This
A Linux Admin
3 - 6 min read
As 2025 approaches, we Linux admins are facing new and often unseen cloud-native security obstacles. While skilled at mitigating known risks,
Leveraging Insights from the Linux Foundation
3 - 5 min read
The Linux Foundation's recent Census III report provides critical insights for Linux administrators, information security professionals, and anyone
Chrome 131 Released: Emergency Security Update Fixes Over a Dozen Significant Vulns
3 - 6 min read
Google recently unveiled a critical security update to their popular web browser, Google Chrome, addressing over a dozen significant security
From Wayland Fixes to Security Boosts: Examining Qt 6.8.1
3 - 6 min read
The recent Qt 6.8.1 release brings significant updates and improvements, strengthening its reputation as a secure and reliable application
Exploring Arch Linux 2024.12.01: Security Implications & Notable Enhancements for Linux Admins
3 - 6 min read
The Arch Linux 2024.12.01 ISO release marks an impressive milestone, offering cutting-edge updates that enhance functionality, streamline
Deck the Halls with Enhanced Security: Linux Kernel 6.13
3 - 5 min read
As Linux admins and infosec professionals prepare for the holiday season, there's much cause for celebration this year! Linus Torvalds recently made
Lessons from Bootkitty: Securing Linux Systems Against UEFI Intrusions
3 - 5 min read
New Linux security threats mark critical junctures that challenge existing policies and test security protocols to their limit. One such milestone

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved