what you don't know can hurt you

Kernel Live Patch Security Notice LSN-0064-1

Kernel Live Patch Security Notice LSN-0064-1
Posted Mar 19, 2020
Authored by Benjamin M. Romer

Paulo Bonzini discovered that the KVM hypervisor implementation in the Linux kernel could improperly let a nested (level 2) guest access the resources of a parent (level 1) guest in certain situations. An attacker could use this to expose sensitive information.

tags | advisory, kernel
systems | linux
advisories | CVE-2020-2732
MD5 | 951ac2ddda0402fb80ea73acdceeffb9

Kernel Live Patch Security Notice LSN-0064-1

Change Mirror Download
==========================================================================
Kernel Live Patch Security Notice 0064-1
March 19, 2020

linux vulnerability
==========================================================================

A security issue affects these releases of Ubuntu:

| Series | Base kernel | Arch | flavors |
|------------------+--------------+----------+------------------|
| Ubuntu 18.04 LTS | 4.15.0 | amd64 | aws |
| Ubuntu 18.04 LTS | 4.15.0 | amd64 | generic |
| Ubuntu 18.04 LTS | 4.15.0 | amd64 | lowlatency |
| Ubuntu 18.04 LTS | 4.15.0 | amd64 | oem |
| Ubuntu 18.04 LTS | 5.0.0 | amd64 | azure |
| Ubuntu 18.04 LTS | 5.0.0 | amd64 | gcp |
| Ubuntu 14.04 LTS | 4.4.0 | amd64 | generic |
| Ubuntu 14.04 LTS | 4.4.0 | amd64 | lowlatency |
| Ubuntu 16.04 LTS | 4.4.0 | amd64 | aws |
| Ubuntu 16.04 LTS | 4.4.0 | amd64 | generic |
| Ubuntu 16.04 LTS | 4.4.0 | amd64 | lowlatency |
| Ubuntu 16.04 LTS | 4.15.0 | amd64 | azure |
| Ubuntu 16.04 LTS | 4.15.0 | amd64 | generic |
| Ubuntu 16.04 LTS | 4.15.0 | amd64 | lowlatency |

Summary:

Several security issues were fixed in the kernel.

Software Description:
- linux: Linux kernel

Details:

Paulo Bonzini discovered that the KVM hypervisor implementation in the
Linux kernel could improperly let a nested (level 2) guest access the
resources of a parent (level 1) guest in certain situations. An attacker
could use this to expose sensitive information. (CVE-2020-2732)

Update instructions:

The problem can be corrected by updating your livepatches to the following
versions:

| Kernel | Version | flavors |
|--------------------------+----------+--------------------------|
| 4.4.0-168.197 | 64.2 | generic, lowlatency |
| 4.4.0-168.197~14.04.1 | 64.2 | lowlatency, generic |
| 4.4.0-169.198 | 64.2 | generic, lowlatency |
| 4.4.0-169.198~14.04.1 | 64.2 | lowlatency, generic |
| 4.4.0-170.199 | 64.2 | lowlatency, generic |
| 4.4.0-170.199~14.04.1 | 64.2 | lowlatency, generic |
| 4.4.0-171.200 | 64.2 | lowlatency, generic |
| 4.4.0-171.200~14.04.1 | 64.2 | generic, lowlatency |
| 4.4.0-173.203 | 64.2 | generic, lowlatency |
| 4.4.0-173.203~14.04.1 | 64.2 | generic, lowlatency |
| 4.4.0-174.204 | 64.2 | lowlatency, generic |
| 4.4.0-1098.109 | 64.2 | aws |
| 4.4.0-1099.110 | 64.2 | aws |
| 4.4.0-1100.111 | 64.2 | aws |
| 4.4.0-1101.112 | 64.2 | aws |
| 4.4.0-1102.113 | 64.2 | aws |
| 4.15.0-69.78 | 64.2 | generic, lowlatency |
| 4.15.0-69.78~16.04.1 | 64.2 | lowlatency, generic |
| 4.15.0-70.79 | 64.2 | lowlatency, generic |
| 4.15.0-70.79~16.04.1 | 64.2 | generic, lowlatency |
| 4.15.0-72.81 | 64.2 | generic, lowlatency |
| 4.15.0-72.81~16.04.1 | 64.2 | generic, lowlatency |
| 4.15.0-74.83~16.04.1 | 64.2 | lowlatency, generic |
| 4.15.0-74.84 | 64.2 | generic, lowlatency |
| 4.15.0-76.86 | 64.2 | generic, lowlatency |
| 4.15.0-76.86~16.04.1 | 64.2 | lowlatency, generic |
| 4.15.0-88.88 | 64.2 | generic, lowlatency |
| 4.15.0-88.88~16.04.1 | 64.2 | lowlatency, generic |
| 4.15.0-1054.56 | 64.2 | aws |
| 4.15.0-1056.58 | 64.2 | aws |
| 4.15.0-1057.59 | 64.2 | aws |
| 4.15.0-1058.60 | 64.2 | aws |
| 4.15.0-1060.62 | 64.2 | aws |
| 4.15.0-1063.68 | 64.2 | azure |
| 4.15.0-1063.72 | 64.2 | oem |
| 4.15.0-1064.69 | 64.2 | azure |
| 4.15.0-1064.73 | 64.2 | oem |
| 4.15.0-1065.75 | 64.2 | oem |
| 4.15.0-1066.71 | 64.2 | azure |
| 4.15.0-1066.76 | 64.2 | oem |
| 4.15.0-1067.72 | 64.2 | azure |
| 4.15.0-1067.77 | 64.2 | oem |
| 4.15.0-1069.74 | 64.2 | azure |
| 4.15.0-1069.79 | 64.2 | oem |
| 4.15.0-1071.76 | 64.2 | azure |
| 4.15.0-1073.83 | 64.2 | oem |
| 5.0.0-1025.26~18.04.1 | 64.5 | gcp |
| 5.0.0-1025.27~18.04.1 | 64.4 | azure |
| 5.0.0-1027.29~18.04.1 | 64.4 | azure |
| 5.0.0-1028.29~18.04.1 | 64.5 | gcp |
| 5.0.0-1028.30~18.04.1 | 64.4 | azure |
| 5.0.0-1029.30~18.04.1 | 64.5 | gcp |
| 5.0.0-1029.31~18.04.1 | 64.4 | azure |

Support Information:

Kernels older than the levels listed below do not receive livepatch
updates. Please upgrade your kernel as soon as possible.

| Series | Version | Flavors |
|------------------+------------------+--------------------------|
| Ubuntu 18.04 LTS | 4.15.0-1054 | aws |
| Ubuntu 16.04 LTS | 4.4.0-1098 | aws |
| Ubuntu 18.04 LTS | 5.0.0-1025 | azure |
| Ubuntu 16.04 LTS | 4.15.0-1063 | azure |
| Ubuntu 18.04 LTS | 4.15.0-69 | generic lowlatency |
| Ubuntu 18.04 LTS | 5.0.0-1025 | gcp |
| Ubuntu 16.04 LTS | 4.15.0-69 | generic lowlatency |
| Ubuntu 14.04 LTS | 4.4.0-168 | generic lowlatency |
| Ubuntu 18.04 LTS | 4.15.0-1063 | oem |
| Ubuntu 16.04 LTS | 4.4.0-168 | generic lowlatency |

References:
CVE-2020-2732


--
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
Login or Register to add favorites

File Archive:

June 2020

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jun 1st
    10 Files
  • 2
    Jun 2nd
    9 Files
  • 3
    Jun 3rd
    0 Files
  • 4
    Jun 4th
    0 Files
  • 5
    Jun 5th
    0 Files
  • 6
    Jun 6th
    0 Files
  • 7
    Jun 7th
    0 Files
  • 8
    Jun 8th
    0 Files
  • 9
    Jun 9th
    0 Files
  • 10
    Jun 10th
    0 Files
  • 11
    Jun 11th
    0 Files
  • 12
    Jun 12th
    0 Files
  • 13
    Jun 13th
    0 Files
  • 14
    Jun 14th
    0 Files
  • 15
    Jun 15th
    0 Files
  • 16
    Jun 16th
    0 Files
  • 17
    Jun 17th
    0 Files
  • 18
    Jun 18th
    0 Files
  • 19
    Jun 19th
    0 Files
  • 20
    Jun 20th
    0 Files
  • 21
    Jun 21st
    0 Files
  • 22
    Jun 22nd
    0 Files
  • 23
    Jun 23rd
    0 Files
  • 24
    Jun 24th
    0 Files
  • 25
    Jun 25th
    0 Files
  • 26
    Jun 26th
    0 Files
  • 27
    Jun 27th
    0 Files
  • 28
    Jun 28th
    0 Files
  • 29
    Jun 29th
    0 Files
  • 30
    Jun 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2020 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close