{"id":"USN-3509-3","aliases":[],"status":"published","title":"linux, linux-aws, linux-kvm, linux-raspi2 regression","description":"USN-3509-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04\nLTS. Unfortunately, it also introduced a regression that prevented the\nCeph network filesystem from being used. This update fixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n Mohamed Ghannam discovered that a use-after-free vulnerability existed in\n the Netlink subsystem (XFRM) in the Linux kernel. A local attacker could\n use this to cause a denial of service (system crash) or possibly execute\n arbitrary code. (CVE-2017-16939)\n\n It was discovered that the Linux kernel did not properly handle copy-on-\n write of transparent huge pages. A local attacker could use this to cause a\n denial of service (application crashes) or possibly gain administrative\n privileges. (CVE-2017-1000405)\n\n Fan Wu, Haoran Qiu, and Shixiong Zhao discovered that the associative array\n implementation in the Linux kernel sometimes did not properly handle adding\n a new entry. A local attacker could use this to cause a denial of service\n (system crash). (CVE-2017-12193)\n\n Andrey Konovalov discovered an out-of-bounds read in the GTCO digitizer USB\n driver for the Linux kernel. A physically proximate attacker could use this\n to cause a denial of service (system crash) or possibly execute arbitrary\n code. (CVE-2017-16643)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2017-12-15T08:27:36Z","modified":"2026-04-22T09:41:44Z","fixes":[{"ecosystem":"Ubuntu:16.04:LTS","package":"linux","fixed_in":["4.4.0-104.127"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-aws","fixed_in":["4.4.0-1044.53"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-kvm","fixed_in":["4.4.0-1013.18"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","fixed_in":["4.4.0-1080.88"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-104.127"}]}],"versions":["4.2.0-16.19","4.2.0-17.21","4.2.0-19.23","4.3.0-1.10","4.3.0-2.11","4.3.0-5.16","4.3.0-6.17","4.3.0-7.18","4.4.0-2.16","4.4.0-4.19","4.4.0-6.21","4.4.0-7.22","4.4.0-8.23","4.4.0-9.24","4.4.0-10.25","4.4.0-11.26","4.4.0-12.28","4.4.0-13.29","4.4.0-14.30","4.4.0-15.31","4.4.0-16.32","4.4.0-17.33","4.4.0-18.34","4.4.0-21.37","4.4.0-22.39","4.4.0-22.40","4.4.0-24.43","4.4.0-28.47","4.4.0-31.50","4.4.0-34.53","4.4.0-36.55","4.4.0-38.57","4.4.0-42.62","4.4.0-43.63","4.4.0-45.66","4.4.0-47.68","4.4.0-51.72","4.4.0-53.74","4.4.0-57.78","4.4.0-59.80","4.4.0-62.83","4.4.0-63.84","4.4.0-64.85","4.4.0-65.86","4.4.0-66.87","4.4.0-67.88","4.4.0-70.91","4.4.0-71.92","4.4.0-72.93","4.4.0-75.96","4.4.0-77.98","4.4.0-78.99","4.4.0-79.100","4.4.0-81.104","4.4.0-83.106","4.4.0-87.110","4.4.0-89.112","4.4.0-91.114","4.4.0-92.115","4.4.0-93.116","4.4.0-96.119","4.4.0-97.120","4.4.0-98.121","4.4.0-101.124","4.4.0-103.126"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-aws","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1044.53"}]}],"versions":["4.4.0-1001.10","4.4.0-1003.12","4.4.0-1004.13","4.4.0-1007.16","4.4.0-1009.18","4.4.0-1011.20","4.4.0-1012.21","4.4.0-1013.22","4.4.0-1016.25","4.4.0-1017.26","4.4.0-1018.27","4.4.0-1020.29","4.4.0-1022.31","4.4.0-1026.35","4.4.0-1028.37","4.4.0-1030.39","4.4.0-1031.40","4.4.0-1032.41","4.4.0-1035.44","4.4.0-1037.46","4.4.0-1038.47","4.4.0-1039.48","4.4.0-1041.50","4.4.0-1043.52"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-kvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1013.18"}]}],"versions":["4.4.0-1004.9","4.4.0-1007.12","4.4.0-1008.13","4.4.0-1009.14","4.4.0-1010.15","4.4.0-1012.17"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"linux-raspi2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.0-1080.88"}]}],"versions":["4.2.0-1013.19","4.2.0-1014.21","4.3.0-1006.6","4.4.0-1003.4","4.4.0-1004.5","4.4.0-1009.10","4.4.0-1010.12","4.4.0-1010.13","4.4.0-1012.16","4.4.0-1016.22","4.4.0-1017.23","4.4.0-1019.25","4.4.0-1021.27","4.4.0-1023.29","4.4.0-1027.33","4.4.0-1029.36","4.4.0-1034.41","4.4.0-1038.45","4.4.0-1040.47","4.4.0-1042.49","4.4.0-1044.51","4.4.0-1046.53","4.4.0-1048.55","4.4.0-1050.57","4.4.0-1051.58","4.4.0-1052.59","4.4.0-1054.61","4.4.0-1055.62","4.4.0-1057.64","4.4.0-1059.67","4.4.0-1061.69","4.4.0-1065.73","4.4.0-1067.75","4.4.0-1069.77","4.4.0-1070.78","4.4.0-1071.79","4.4.0-1074.82","4.4.0-1075.83","4.4.0-1076.84","4.4.0-1077.85","4.4.0-1079.87"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-3509-3","tags":["advisory"]},{"url":"https://launchpad.net/bugs/1737033","tags":["report"]}],"sources":{"osv":[{"id":"USN-3509-3","title":"linux, linux-aws, linux-kvm, linux-raspi2 regression","description":"USN-3509-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04\nLTS. Unfortunately, it also introduced a regression that prevented the\nCeph network filesystem from being used. This update fixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n Mohamed Ghannam discovered that a use-after-free vulnerability existed in\n the Netlink subsystem (XFRM) in the Linux kernel. A local attacker could\n use this to cause a denial of service (system crash) or possibly execute\n arbitrary code. (CVE-2017-16939)\n\n It was discovered that the Linux kernel did not properly handle copy-on-\n write of transparent huge pages. A local attacker could use this to cause a\n denial of service (application crashes) or possibly gain administrative\n privileges. (CVE-2017-1000405)\n\n Fan Wu, Haoran Qiu, and Shixiong Zhao discovered that the associative array\n implementation in the Linux kernel sometimes did not properly handle adding\n a new entry. A local attacker could use this to cause a denial of service\n (system crash). (CVE-2017-12193)\n\n Andrey Konovalov discovered an out-of-bounds read in the GTCO digitizer USB\n driver for the Linux kernel. A physically proximate attacker could use this\n to cause a denial of service (system crash) or possibly execute arbitrary\n code. (CVE-2017-16643)\n","status":"published","published":"2017-12-15T08:27:36Z","modified":"2026-04-22T09:41:44.877182Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}