Oval Definition:	oval:com.ubuntu.xenial:def:201718261000
Revision Date: 2018-04-19 Version: 1 Title: CVE-2017-18261 on Ubuntu 16.04 LTS (xenial) - medium. Description: The arch_timer_reg_read_stable macro in arch/arm64/include/asm/arch_timer.h in the Linux kernel before 4.13 allows local users to cause a denial of service (infinite recursion) by writing to a file under /sys/kernel/debug in certain circumstances, as demonstrated by a scenario involving debugfs, ftrace, PREEMPT_TRACER, and FUNCTION_GRAPH_TRACER. Family: unix Class: vulnerability Status: Reference(s): CVE-2017-18261 Platform(s): Ubuntu 16.04 LTS Product(s): Definition Synopsis Ubuntu 16.04 LTS (xenial) is installed. AND Package Information NOT While related to the CVE in some way, the 'linux' package in xenial is not affected. OR NOT While related to the CVE in some way, the 'linux-aws' package in xenial is not affected. OR NOT While related to the CVE in some way, the 'linux-azure' package in xenial is not affected (note: '4.13.0-1005.7'). OR NOT While related to the CVE in some way, the 'linux-azure-edge' package in xenial is not affected (note: '4.15.0-1002.2'). OR While related to the CVE in some way, a decision has been made to ignore it (note: 'was needed ESM criteria'). OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned'). OR NOT While related to the CVE in some way, the 'linux-gcp' package in xenial is not affected (note: '4.13.0-1002.5'). OR While related to the CVE in some way, a decision has been made to ignore it (note: 'was needs-triage now end-of-life'). OR While related to the CVE in some way, a decision has been made to ignore it (note: 'was needs-triage now end-of-life'). OR NOT While related to the CVE in some way, the 'linux-hwe' package in xenial is not affected (note: '4.13.0-26.29~16.04.2'). OR NOT While related to the CVE in some way, the 'linux-hwe-edge' package in xenial is not affected (note: '4.13.0-26.29~16.04.2'). OR NOT While related to the CVE in some way, the 'linux-kvm' package in xenial is not affected. OR While related to the CVE in some way, a decision has been made to ignore it (note: 'abandoned'). OR NOT While related to the CVE in some way, the 'linux-oem' package in xenial is not affected (note: '4.13.0-1008.9'). OR NOT While related to the CVE in some way, the 'linux-raspi2' package in xenial is not affected. OR NOT While related to the CVE in some way, the 'linux-snapdragon' package in xenial is not affected.
BACK