Ubuntu has rolled out critical security updates aimed at fortifying the defenses of Ubuntu 18.04 against high-severity vulnerabilities within the Linux kernel. The disclosed vulnerabilities encompass a spectrum of issues, such as use-after-free vulnerabilities in the ATM and AppleTalk subsystems, a race condition in the Rose X.25 protocol, and a memory leak in the netfilter connection tracker. Additionally, out-of-bounds read and write vulnerabilities in the CIFS network file system and TLS subsystem were addressed in this update.
As Ubuntu 18.04 has reached its end of life, this patch becomes particularly crucial, ensuring that systems remain resilient against potential exploits. The severity of these vulnerabilities ranges from denial of service risks to the possibility of arbitrary code execution and privilege escalation. To stay protected, system administrators are strongly advised to apply these security updates promptly. For those looking for extended support beyond the end of life, TuxCare’s Extended Lifecycle Support for Ubuntu 18.04 offers a cost-effective solution, providing five additional years of security patches.
Reference:
