Ubuntu 3740-1: Linux kernel vulnerabilities
Summary
Update Instructions
The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS: linux-image-4.15.0-1015-oem 4.15.0.1015.17 linux-image-4.15.0-1017-gcp 4.15.0-1017.18 linux-image-4.15.0-1019-aws 4.15.0-1019.19 linux-image-4.15.0-1019-kvm 4.15.0-1019.19 linux-image-4.15.0-1020-raspi2 4.15.0-1020.22 linux-image-4.15.0-1021-azure 4.15.0.1021.21 linux-image-4.15.0-32-generic 4.15.0-32.35 linux-image-4.15.0-32-generic-lpae 4.15.0-32.35 linux-image-4.15.0-32-lowlatency 4.15.0-32.35 linux-image-4.15.0-32-snapdragon 4.15.0-32.35 linux-image-aws 4.15.0.1019.19 linux-image-azure 4.15.0.1021.21 linux-image-azure-edge 4.15.0.1021.21 linux-image-gcp 4.15.0.1017.19 linux-image-generic 4.15.0.32.34 linux-image-generic-lpae 4.15.0.32.34 linux-image-gke 4.15.0.1017.19 linux-image-kvm 4.15.0.1019.19 linux-image-lowlatency 4.15.0.32.34 linux-image-oem 4.15.0.1015.17 linux-image-raspi2 4.15.0.1020.18 linux-image-snapdragon 4.15.0.32.34 Please note that the recommended mitigation for CVE-2018-3646 involves updating processor microcode in addition to updating the kernel; however, the kernel includes a fallback for processors that have not received microcode updates. After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.
References
https://ubuntu.com/security/notices/USN-3740-1
CVE-2018-3620, CVE-2018-3646, CVE-2018-5391,
https://wiki.ubuntu.com/SecurityTeam/KnowledgeBase/L1TF
Package Information
https://launchpad.net/ubuntu/+source/linux/4.15.0-32.35 https://launchpad.net/ubuntu/+source/linux-aws/4.15.0-1019.19 https://launchpad.net/ubuntu/+source/linux-azure/4.15.0-1021.21 https://launchpad.net/ubuntu/+source/linux-gcp/4.15.0-1017.18 https://launchpad.net/ubuntu/+source/linux-kvm/4.15.0-1019.19 https://launchpad.net/ubuntu/+source/linux-oem/4.15.0-1015.18 https://launchpad.net/ubuntu/+source/linux-raspi2/4.15.0-1020.22