Linux Kernel Security Advisory: Multiple CVEs (CVE-2018-5995, Spectre variants, UAF, etc.)

Key Information Vulnerability Overview Package: linux Version: 3.16.68-1 CVE IDs: - CVE-2018-5995 - CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091 - CVE-2019-2024 - CVE-2019-3459, CVE-2019-3460 - CVE-2019-3882 - CVE-2019-3901 - CVE-2019-6133 - CVE-2019-9503 一 CVE-2019-11190 - CVE-2019-11486 - CVE-2019-11599 Vulnerability Details 1. CVE-2018-5995 - Discoverer: ADLab of VenusTech - Description: The kernel records virtual addresses assigned to per-CPU data, which may make exploitation of other vulnerabilities easier. 2. CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091 - Description: Multiple researchers discovered vulnerabilities in Intel processor speculative execution design, allowing unprivileged processes to read sensitive information, including kernel and other process data. 3. CVE-2019-2024 - Description: A use-after-free vulnerability was found in the em28xx video capture driver, potentially leading to denial of service or privilege escalation. 4. CVE-2019-3459, CVE-2019-3460 - Description: Bluetooth L2CAP implementation lacks bounds checking, potentially leading to sensitive information disclosure. 5. CVE-2019-3882 - Description: The vfio implementation does not limit the number of DMA mappings to device memory, potentially leading to denial of service. 6. CVE-2019-3901 - Description: After a task executes a setuid program, a local user can read performance events, potentially leaking sensitive information. 7. CVE-2019-6133 - Description: PolicyKit's authentication checks can be bypassed, allowing a local user to create processes with matching start time and process ID, thereby bypassing authentication. 8. CVE-2019-9503 - Description: The brcmfmac driver does not properly distinguish between Wi-Fi firmware messages and other packets, potentially leading to denial of service or exploitation of other vulnerabilities. 9. CVE-2019-11190 - Description: When executing a setuid program, the kernel sets the program's address space but still allows reading performance events, potentially bypassing ASLR. 10. CVE-2019-11486 - Description: A race condition in Siemens R3964 line protocol, potentially leading to unspecified security impacts. 11. CVE-2019-11599 - Description: A race condition in kernel core dump handling, potentially leading to use-after-free. Recommended Actions Upgrade the linux and linux-latest packages to version 3.16.68-1. Use or to perform the upgrade. Install updated CPU microcode. Read more about Debian LTS security announcements and how to apply these updates: Debian LTS

Goal Reached Thanks to every supporter — we hit 100%!

Linux Kernel Security Advisory: Multiple CVEs (CVE-2018-5995, Spectre variants, UAF, etc.)