I updated my Ubuntu 14.04 LTS.
/var/log/apt/history.log says that
linux-signed-image-3.13.0-134-generic:amd64 has been installed.
The changelog page says
linux (3.13.0-134.183) trusty; urgency=low
linux: 3.13.0-134.183 -proposed tracker (LP: #1722335)
[ Thadeu Lima de Souza Cascardo ] * CVE-2017-10661
- timerfd: Protect the might cancel mechanism proper
- f2fs: sanity check segment count
- f2fs: sanity check checkpoint segno and blkoff
- xfs: XFS_IS_REALTIME_INODE() should be false if no rt device present
- xen-blkback: don't leak stack data via response ring
- mqueue: fix a use-after-free in sys_mq_notify()
- tipc: check minimum bearer MTU
-- Juerg Haefliger Tue, 10 Oct 2017 13:23:11 +0200
This does not look like patch for the Key Reinstallation Attacks.
Should I assume that a patch has not been released yet? Was it released prior to the divulgation of the attacks? Do I wait?