In the Linux kernel before 4.16.4, a double free vulnerability in the f_midi_set_alt function of drivers/usb/gadget/function/f_midi.c in the f_midi driver may allow attackers to cause a denial of service or possibly have unspecified other impact.

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4145-1 advisory.

    It was discovered that a race condition existed in the GFS2 file system in the Linux kernel. A local     attacker could possibly use this to cause a denial of service (system crash). (CVE-2016-10905)

    It was discovered that the IPv6 implementation in the Linux kernel did not properly validate socket     options in some situations. A local attacker could use this to cause a denial of service (system crash) or     possibly execute arbitrary code. (CVE-2017-18509)

    It was discovered that the USB gadget Midi driver in the Linux kernel contained a double-free     vulnerability when handling certain error conditions. A local attacker could use this to cause a denial of     service (system crash). (CVE-2018-20961)

    It was discovered that the XFS file system in the Linux kernel did not properly handle mount failures in     some situations. A local attacker could possibly use this to cause a denial of service (system crash) or     execute arbitrary code. (CVE-2018-20976)

    It was discovered that the Intel Wi-Fi device driver in the Linux kernel did not properly validate certain     Tunneled Direct Link Setup (TDLS). A physically proximate attacker could use this to cause a denial of     service (Wi-Fi disconnect). (CVE-2019-0136)

    It was discovered that the Bluetooth UART implementation in the Linux kernel did not properly check for     missing tty operations. A local attacker could use this to cause a denial of service. (CVE-2019-10207)

    It was discovered that an integer overflow existed in the Linux kernel when reference counting pages,     leading to potential use-after-free issues. A local attacker could use this to cause a denial of service     (system crash) or possibly execute arbitrary code. (CVE-2019-11487)

    It was discovered that the GTCO tablet input driver in the Linux kernel did not properly bounds check the     initial HID report sent by the device. A physically proximate attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2019-13631)

    It was discovered that the Raremono AM/FM/SW radio device driver in the Linux kernel did not properly     allocate memory, leading to a use-after-free. A physically proximate attacker could use this to cause a     denial of service or possibly execute arbitrary code. (CVE-2019-15211)

    It was discovered that a race condition existed in the CPiA2 video4linux device driver for the Linux     kernel, leading to a use-after-free. A physically proximate attacker could use this to cause a denial of     service (system crash) or possibly execute arbitrary code. (CVE-2019-15215)

    It was discovered that the Atheros mobile chipset driver in the Linux kernel did not properly validate     data in some situations. An attacker could use this to cause a denial of service (system crash).
    (CVE-2019-15926)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

New kernel packages are available for Slackware 14.2 to fix a security issue.

ID	Name	Product	Family	Severity
129491	Ubuntu 16.04 LTS : Linux kernel vulnerabilities (USN-4145-1)	Nessus	Ubuntu Local Security Checks	critical
128274	Slackware 14.2 : Slackware 14.2 kernel (SSA:2019-238-01)	Nessus	Slackware Local Security Checks	critical

Detections

Analytics

CVE-2018-20961

critical

Tenable Plugins

critical

critical