Launchpad CVE tracker

CVE 2017-15265

Race condition in the ALSA subsystem in the Linux kernel before 4.13.8 allows local users to cause a denial of service (use-after-free) or possibly have unspecified other impact via crafted /dev/snd/seq ioctl calls, related to sound/core/seq/seq_clientmgr.c and sound/core/seq/seq_ports.c.

Related bugs and status

CVE-2017-15265 (Candidate) is related to these bugs:

Bug #1771480: WARNING: CPU: 28 PID: 34085 at /build/linux-90Gc2C/linux-3.13.0/net/core/dev.c:1433 dev_disable_lro+0x87/0x90()

Summary				In	Importance	Status
	1771480	WARNING: CPU: 28 PID: 34085 at /build/linux-90Gc2C/linux-3.13.0/net/core/dev.c:1433 dev_disable_lro+0x87/0x90()		linux (Ubuntu)	Medium	Fix Released
	1771480	WARNING: CPU: 28 PID: 34085 at /build/linux-90Gc2C/linux-3.13.0/net/core/dev.c:1433 dev_disable_lro+0x87/0x90()		linux (Ubuntu Trusty)	Medium	Fix Released

Bug #1774336: FS-Cache: Assertion failed: FS-Cache: 6 == 5 is false

		In	Importance	Status
1774336	FS-Cache: Assertion failed: FS-Cache: 6 == 5 is false	linux (Ubuntu)	Undecided	Fix Released
1774336	FS-Cache: Assertion failed: FS-Cache: 6 == 5 is false	linux (Ubuntu Artful)	Undecided	Fix Released
1774336	FS-Cache: Assertion failed: FS-Cache: 6 == 5 is false	linux (Ubuntu Bionic)	Undecided	Fix Released
1774336	FS-Cache: Assertion failed: FS-Cache: 6 == 5 is false	linux (Ubuntu Trusty)	Undecided	Fix Released
1774336	FS-Cache: Assertion failed: FS-Cache: 6 == 5 is false	linux (Ubuntu Xenial)	Undecided	Fix Released

Bug #1775316: add_key04 in LTP syscall test cause kernel oops (NULL pointer dereference) with T kernel

		In	Importance	Status
1775316	add_key04 in LTP syscall test cause kernel oops (NULL pointer dereference) with T kernel	linux (Ubuntu)	Undecided	Fix Released
1775316	add_key04 in LTP syscall test cause kernel oops (NULL pointer dereference) with T kernel	ubuntu-kernel-tests	Undecided	Fix Released
1775316	add_key04 in LTP syscall test cause kernel oops (NULL pointer dereference) with T kernel	linux (Ubuntu Trusty)	Undecided	Fix Released

Bug #1775856: register on binfmt_misc may overflow and crash the system

		In	Importance	Status
1775856	register on binfmt_misc may overflow and crash the system	linux (Ubuntu)	Undecided	Fix Released
1775856	register on binfmt_misc may overflow and crash the system	linux (Ubuntu Bionic)	Undecided	Fix Released
1775856	register on binfmt_misc may overflow and crash the system	linux (Ubuntu Cosmic)	Undecided	Fix Released
1775856	register on binfmt_misc may overflow and crash the system	linux (Ubuntu Trusty)	Undecided	Fix Released
1775856	register on binfmt_misc may overflow and crash the system	linux (Ubuntu Precise)	Undecided	Won't Fix
1775856	register on binfmt_misc may overflow and crash the system	linux (Ubuntu Xenial)	Undecided	Fix Released
1775856	register on binfmt_misc may overflow and crash the system	linux (Ubuntu Artful)	Undecided	Fix Released

Bug #1776350: linux: 3.13.0-152.202 -proposed tracker

		In	Importance	Status
1776350	linux: 3.13.0-152.202 -proposed tracker	linux (Ubuntu)	Undecided	Invalid
1776350	linux: 3.13.0-152.202 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1776350	linux: 3.13.0-152.202 -proposed tracker	Kernel SRU Workflow automated-testing	Medium	New
1776350	linux: 3.13.0-152.202 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	New
1776350	linux: 3.13.0-152.202 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1776350	linux: 3.13.0-152.202 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1776350	linux: 3.13.0-152.202 -proposed tracker	Kernel SRU Workflow prepare-package-signed	Medium	Fix Released
1776350	linux: 3.13.0-152.202 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	New
1776350	linux: 3.13.0-152.202 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	New
1776350	linux: 3.13.0-152.202 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	New
1776350	linux: 3.13.0-152.202 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	New
1776350	linux: 3.13.0-152.202 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	New
1776350	linux: 3.13.0-152.202 -proposed tracker	Kernel SRU Workflow upload-to-ppa	Medium	Invalid
1776350	linux: 3.13.0-152.202 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	New
1776350	linux: 3.13.0-152.202 -proposed tracker	linux (Ubuntu Trusty)	Undecided	Fix Released

Bug #1776819: linux: 3.13.0-153.203 -proposed tracker

		In	Importance	Status
1776819	linux: 3.13.0-153.203 -proposed tracker	linux (Ubuntu)	Undecided	Invalid
1776819	linux: 3.13.0-153.203 -proposed tracker	linux (Ubuntu Trusty)	Medium	Fix Released
1776819	linux: 3.13.0-153.203 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1776819	linux: 3.13.0-153.203 -proposed tracker	Kernel SRU Workflow automated-testing	Medium	Fix Released
1776819	linux: 3.13.0-153.203 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	Fix Released
1776819	linux: 3.13.0-153.203 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1776819	linux: 3.13.0-153.203 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1776819	linux: 3.13.0-153.203 -proposed tracker	Kernel SRU Workflow prepare-package-signed	Medium	Fix Released
1776819	linux: 3.13.0-153.203 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1776819	linux: 3.13.0-153.203 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	Fix Released
1776819	linux: 3.13.0-153.203 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	Fix Released
1776819	linux: 3.13.0-153.203 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Fix Released
1776819	linux: 3.13.0-153.203 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	Fix Released
1776819	linux: 3.13.0-153.203 -proposed tracker	Kernel SRU Workflow upload-to-ppa	Medium	Invalid
1776819	linux: 3.13.0-153.203 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2017-15265

References