==========================================================================
Kernel Live Patch Security Notice 0064-1
March 19, 2020

linux vulnerability
==========================================================================

A security issue affects these releases of Ubuntu:

| Series           | Base kernel  | Arch     | flavors          |
|------------------+--------------+----------+------------------|
| Ubuntu 18.04 LTS | 4.15.0       | amd64    | aws              |
| Ubuntu 18.04 LTS | 4.15.0       | amd64    | generic          |
| Ubuntu 18.04 LTS | 4.15.0       | amd64    | lowlatency       |
| Ubuntu 18.04 LTS | 4.15.0       | amd64    | oem              |
| Ubuntu 18.04 LTS | 5.0.0        | amd64    | azure            |
| Ubuntu 18.04 LTS | 5.0.0        | amd64    | gcp              |
| Ubuntu 14.04 LTS | 4.4.0        | amd64    | generic          |
| Ubuntu 14.04 LTS | 4.4.0        | amd64    | lowlatency       |
| Ubuntu 16.04 LTS | 4.4.0        | amd64    | aws              |
| Ubuntu 16.04 LTS | 4.4.0        | amd64    | generic          |
| Ubuntu 16.04 LTS | 4.4.0        | amd64    | lowlatency       |
| Ubuntu 16.04 LTS | 4.15.0       | amd64    | azure            |
| Ubuntu 16.04 LTS | 4.15.0       | amd64    | generic          |
| Ubuntu 16.04 LTS | 4.15.0       | amd64    | lowlatency       |

Summary:

Several security issues were fixed in the kernel.

Software Description:
- linux: Linux kernel

Details:

Paulo Bonzini discovered that the KVM hypervisor implementation in the
Linux kernel could improperly let a nested (level 2) guest access the
resources of a parent (level 1) guest in certain situations. An attacker
could use this to expose sensitive information. (CVE-2020-2732)

Update instructions:

The problem can be corrected by updating your livepatches to the following
versions:

| Kernel                   | Version  | flavors                  |
|--------------------------+----------+--------------------------|
| 4.4.0-168.197            | 64.2     | generic, lowlatency      |
| 4.4.0-168.197~14.04.1    | 64.2     | lowlatency, generic      |
| 4.4.0-169.198            | 64.2     | generic, lowlatency      |
| 4.4.0-169.198~14.04.1    | 64.2     | lowlatency, generic      |
| 4.4.0-170.199            | 64.2     | lowlatency, generic      |
| 4.4.0-170.199~14.04.1    | 64.2     | lowlatency, generic      |
| 4.4.0-171.200            | 64.2     | lowlatency, generic      |
| 4.4.0-171.200~14.04.1    | 64.2     | generic, lowlatency      |
| 4.4.0-173.203            | 64.2     | generic, lowlatency      |
| 4.4.0-173.203~14.04.1    | 64.2     | generic, lowlatency      |
| 4.4.0-174.204            | 64.2     | lowlatency, generic      |
| 4.4.0-1098.109           | 64.2     | aws                      |
| 4.4.0-1099.110           | 64.2     | aws                      |
| 4.4.0-1100.111           | 64.2     | aws                      |
| 4.4.0-1101.112           | 64.2     | aws                      |
| 4.4.0-1102.113           | 64.2     | aws                      |
| 4.15.0-69.78             | 64.2     | generic, lowlatency      |
| 4.15.0-69.78~16.04.1     | 64.2     | lowlatency, generic      |
| 4.15.0-70.79             | 64.2     | lowlatency, generic      |
| 4.15.0-70.79~16.04.1     | 64.2     | generic, lowlatency      |
| 4.15.0-72.81             | 64.2     | generic, lowlatency      |
| 4.15.0-72.81~16.04.1     | 64.2     | generic, lowlatency      |
| 4.15.0-74.83~16.04.1     | 64.2     | lowlatency, generic      |
| 4.15.0-74.84             | 64.2     | generic, lowlatency      |
| 4.15.0-76.86             | 64.2     | generic, lowlatency      |
| 4.15.0-76.86~16.04.1     | 64.2     | lowlatency, generic      |
| 4.15.0-88.88             | 64.2     | generic, lowlatency      |
| 4.15.0-88.88~16.04.1     | 64.2     | lowlatency, generic      |
| 4.15.0-1054.56           | 64.2     | aws                      |
| 4.15.0-1056.58           | 64.2     | aws                      |
| 4.15.0-1057.59           | 64.2     | aws                      |
| 4.15.0-1058.60           | 64.2     | aws                      |
| 4.15.0-1060.62           | 64.2     | aws                      |
| 4.15.0-1063.68           | 64.2     | azure                    |
| 4.15.0-1063.72           | 64.2     | oem                      |
| 4.15.0-1064.69           | 64.2     | azure                    |
| 4.15.0-1064.73           | 64.2     | oem                      |
| 4.15.0-1065.75           | 64.2     | oem                      |
| 4.15.0-1066.71           | 64.2     | azure                    |
| 4.15.0-1066.76           | 64.2     | oem                      |
| 4.15.0-1067.72           | 64.2     | azure                    |
| 4.15.0-1067.77           | 64.2     | oem                      |
| 4.15.0-1069.74           | 64.2     | azure                    |
| 4.15.0-1069.79           | 64.2     | oem                      |
| 4.15.0-1071.76           | 64.2     | azure                    |
| 4.15.0-1073.83           | 64.2     | oem                      |
| 5.0.0-1025.26~18.04.1    | 64.5     | gcp                      |
| 5.0.0-1025.27~18.04.1    | 64.4     | azure                    |
| 5.0.0-1027.29~18.04.1    | 64.4     | azure                    |
| 5.0.0-1028.29~18.04.1    | 64.5     | gcp                      |
| 5.0.0-1028.30~18.04.1    | 64.4     | azure                    |
| 5.0.0-1029.30~18.04.1    | 64.5     | gcp                      |
| 5.0.0-1029.31~18.04.1    | 64.4     | azure                    |

Support Information:

Kernels older than the levels listed below do not receive livepatch
updates. Please upgrade your kernel as soon as possible.

| Series           | Version          | Flavors                  |
|------------------+------------------+--------------------------|
| Ubuntu 18.04 LTS | 4.15.0-1054      | aws                      |
| Ubuntu 16.04 LTS | 4.4.0-1098       | aws                      |
| Ubuntu 18.04 LTS | 5.0.0-1025       | azure                    |
| Ubuntu 16.04 LTS | 4.15.0-1063      | azure                    |
| Ubuntu 18.04 LTS | 4.15.0-69        | generic lowlatency       |
| Ubuntu 18.04 LTS | 5.0.0-1025       | gcp                      |
| Ubuntu 16.04 LTS | 4.15.0-69        | generic lowlatency       |
| Ubuntu 14.04 LTS | 4.4.0-168        | generic lowlatency       |
| Ubuntu 18.04 LTS | 4.15.0-1063      | oem                      |
| Ubuntu 16.04 LTS | 4.4.0-168        | generic lowlatency       |

References:
  CVE-2020-2732


-- 
ubuntu-security-announce mailing list
ubuntu-security-announce@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce