Ubuntu USN-3583-2: Linux Kernel f2fs OOB Write and ALSA UAF Vulnerability Patch

Critical Vulnerability Information Vulnerability Identifiers USN Number: USN-3583-2 CVE Numbers: - CVE-2017-0750 - CVE-2017-0861 - Additional CVE numbers (click to view more) Affected Packages linux-lts-trusty: Linux hardware enablement kernel from Trusty for Precise ESM Vulnerability Description Details: - A boundary write vulnerability was discovered in the Flash-Friendly File System (f2fs) of the Linux kernel, which could lead to system crashes or arbitrary code execution. - A race condition was found in the ALSA PCM subsystem of the Linux kernel, resulting in a use-after-free vulnerability, potentially causing system crashes or arbitrary code execution. - Vulnerabilities in KVM implementation (not fully displayed) Update Notes Important Notes: Due to unavoidable ABI changes, the kernel update will assign a new version number, requiring recompilation and reinstallation of all third-party kernel modules. Package Versions: - 12.04 precise: - linux-image-3.13.0-142-generic: 3.13.0-142.191 - linux-image-generic-lpae-lts-trusty: 3.13.0-142.133 - linux-image-3.13.0-142-generic-lpae: 3.13.0-142.191-precise1 - linux-image-generic-lts-trusty: 3.13.0-142.133 Related Notices and References Related Notices: Multiple related security notices including USN-3632-1 References: Links to multiple CVE numbers, click to expand and view

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu USN-3583-2: Linux Kernel f2fs OOB Write and ALSA UAF Vulnerability Patch