Showing 1 - 9 of 9

CVE-2019-17056

Status Candidate

Overview

llcp_sock_create in net/nfc/llcp_sock.c in the AF_NFC network module in the Linux kernel through 5.3.2 does not enforce CAP_NET_RAW, which means that unprivileged users can create a raw socket, aka CID-3a359798b176.

Related Files

Ubuntu Security Notice USN-4186-3: Posted Nov 14, 2019; Authored by Ubuntu | Site security.ubuntu.com; Ubuntu Security Notice 4186-3 - USN-4186-1 fixed vulnerabilities in the Linux kernel. It was discovered that the kernel fix for CVE-2019-0155 was incomplete on 64-bit Intel x86 systems. This update addresses the issue. Various other issues were also addressed.; tags | advisory, x86, kernel, vulnerability; systems | linux, ubuntu; advisories | CVE-2018-12207, CVE-2019-0154, CVE-2019-0155, CVE-2019-11135, CVE-2019-15098, CVE-2019-16746, CVE-2019-17052, CVE-2019-17053, CVE-2019-17054, CVE-2019-17055, CVE-2019-17056, CVE-2019-17666, CVE-2019-2215; SHA-256 | a22fb499a8eee3d48959f316cc92b99039174e4ec75ff93b2f12800519de703c; Download | Favorite | View

Ubuntu Security Notice USN-4185-3: Posted Nov 14, 2019; Authored by Ubuntu | Site security.ubuntu.com; Ubuntu Security Notice 4185-3 - USN-4185-1 fixed vulnerabilities in the Linux kernel. It was discovered that the kernel fix for CVE-2019-0155 was incomplete on 64-bit Intel x86 systems. Also, the update introduced a regression that broke KVM guests where extended page tables are disabled or not supported. This update addresses both issues. Various other issues were also addressed.; tags | advisory, x86, kernel, vulnerability; systems | linux, ubuntu; advisories | CVE-2018-12207, CVE-2019-0154, CVE-2019-0155, CVE-2019-11135, CVE-2019-15098, CVE-2019-17052, CVE-2019-17053, CVE-2019-17054, CVE-2019-17055, CVE-2019-17056, CVE-2019-17666; SHA-256 | 0943619d6246e8a0cdee4b5acfc1807d3c4914c36a38fbe8ded7be757a4e396b; Download | Favorite | View

Ubuntu Security Notice USN-4184-2: Posted Nov 14, 2019; Authored by Ubuntu | Site security.ubuntu.com; Ubuntu Security Notice 4184-2 - USN-4184-1 fixed vulnerabilities in the Linux kernel. It was discovered that the kernel fix for CVE-2019-0155 was incomplete on 64-bit Intel x86 systems. Also, the update introduced a regression that broke KVM guests where extended page tables are disabled or not supported. This update addresses both issues. Various other issues were also addressed.; tags | advisory, x86, kernel, vulnerability; systems | linux, ubuntu; advisories | CVE-2018-12207, CVE-2019-0154, CVE-2019-0155, CVE-2019-11135, CVE-2019-15098, CVE-2019-15791, CVE-2019-15792, CVE-2019-15793, CVE-2019-17052, CVE-2019-17053, CVE-2019-17054, CVE-2019-17055, CVE-2019-17056, CVE-2019-17666; SHA-256 | b7e4f5cb2e7a1b61d8abbcf5d64a6bd1b12b10f64ec69db57292af5b7c023804; Download | Favorite | View

Ubuntu Security Notice USN-4186-2: Posted Nov 13, 2019; Authored by Ubuntu | Site security.ubuntu.com; Ubuntu Security Notice 4186-2 - USN-4186-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. This update provides the corresponding updates for the Linux Hardware Enablement kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 ESM. Stephan van Schaik, Alyssa Milburn, Sebastian; tags | advisory, kernel, local, vulnerability; systems | linux, ubuntu; advisories | CVE-2018-12207, CVE-2019-0154, CVE-2019-0155, CVE-2019-11135, CVE-2019-15098, CVE-2019-17052, CVE-2019-17053, CVE-2019-17054, CVE-2019-17055, CVE-2019-17056, CVE-2019-17666; SHA-256 | 94710aa91a6ba3adbd95a25aeedff5ae45bd7988fba5c2c8b4a4a7314588dd48; Download | Favorite | View