This bug has been fixed for quite some time:
https://usn.ubuntu.com/usn/usn-3485-1
https://usn.ubuntu.com/usn/usn-3485-2
https://usn.ubuntu.com/usn/usn-3487-1
https://usn.ubuntu.com/usn/usn-3485-3
https://usn.ubuntu.com/usn/usn-3754-1
Closing the bug report.
** Changed in: linux (Ubuntu)
Status: Triaged => Fix Released
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1724785
Title:
SSD Advisory – Linux Kernel AF_PACKET Use-After-Free
Status in linux package in Ubuntu:
Fix Released
Bug description:
Hello,
Recently, information was published on the vulnerability in AF_PACKET:
http://seclists.org/fulldisclosure/2017/Oct/44
We tested on cores:
- Linux uweb01 4.4.0-93-generic #116-Ubuntu SMP Fri Aug 11 21:17:51 UTC 2017
x86_64 x86_64 x86_64 GNU/Linux
- Linux uweb01 4.4.0-98-lowlatency #121-Ubuntu SMP PREEMPT Tue Oct 10
15:16:03 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
The increase in the privileges inside the container is reproduced in 100%.
In some cases, the system hangs completely (without panic of the kernel).
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1724785/+subscriptions
--
Mailing list: https://launchpad.net/~kernel-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~kernel-packages
More help : https://help.launchpad.net/ListHelp
