A local attacker could use this to block utilities that examine the procfs filesystem to report operating system state, such as ps(1). (CVE-2017-18241) It was discovered that the procfs filesystem did not properly handle processes mapping some memory elements onto files. An attacker could use this to cause a denial of service (system crash). It was discovered that the f2fs filesystem implementation in the Linux kernel did not handle the noflush_merge mount option correctly. This update provides the corresponding updates for the Linux Hardware Enablement (HWE) kernel from Ubuntu 16.04 LTS for Ubuntu 14.04 LTS. Description USN-3910-1 fixed vulnerabilities in the Linux kernel for Ubuntu 16.04 LTS. Synopsis The remote Ubuntu host is missing one or more security-related patches. Severity display preferences can be toggled in the settings dropdown. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity.

The calculated severity for Plugins has been updated to use CVSS v3 by default.

Ubuntu 14.04 lts kernel