USN-2529-1: Linux kernel (Utopic HWE) vulnerability

Releases

• Ubuntu 14.04 ESM

Packages

• linux-lts-utopic - Linux hardware enablement kernel from Utopic

Details

It was discovered that the Linux kernel's Infiniband subsystem did not
properly sanitize its input parameters while registering memory regions
from userspace. A local user could exploit this flaw to cause a denial of
service (system crash) or to potentially gain administrative privileges.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 14.04

• linux-image-3.16.0-31-generic - 3.16.0-31.43~14.04.1
• linux-image-3.16.0-31-generic-lpae - 3.16.0-31.43~14.04.1
• linux-image-3.16.0-31-lowlatency - 3.16.0-31.43~14.04.1
• linux-image-3.16.0-31-powerpc-e500mc - 3.16.0-31.43~14.04.1
• linux-image-3.16.0-31-powerpc-smp - 3.16.0-31.43~14.04.1
• linux-image-3.16.0-31-powerpc64-emb - 3.16.0-31.43~14.04.1
• linux-image-3.16.0-31-powerpc64-smp - 3.16.0-31.43~14.04.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

• CVE-2014-8159

Related notices

• USN-2526-1: linux-image-3.2.0-77-highbank, linux, linux-image-3.2.0-77-omap, linux-image-3.2.0-77-virtual, linux-image-3.2.0-77-generic-pae, linux-image-3.2.0-77-generic, linux-image-3.2.0-77-powerpc-smp, linux-image-3.2.0-77-powerpc64-smp
• USN-2527-1: linux-image-3.13.0-46-generic, linux-lts-trusty, linux-image-3.13.0-46-generic-lpae
• USN-2561-1: linux-image-3.2.0-1462-omap4, linux-ti-omap4
• USN-2530-1: linux-image-3.16.0-31-powerpc64-smp, linux-image-3.16.0-31-generic-lpae, linux-image-3.16.0-31-generic, linux, linux-image-3.16.0-31-lowlatency, linux-image-3.16.0-31-powerpc64-emb, linux-image-3.16.0-31-powerpc-smp, linux-image-3.16.0-31-powerpc-e500mc
• USN-2525-1: linux-image-2.6.32-73-sparc64-smp, linux, linux-image-2.6.32-73-generic-pae, linux-image-2.6.32-73-lpia, linux-image-2.6.32-73-powerpc, linux-image-2.6.32-73-generic, linux-image-2.6.32-73-powerpc-smp, linux-image-2.6.32-73-preempt, linux-image-2.6.32-73-virtual, linux-image-2.6.32-73-ia64, linux-image-2.6.32-73-powerpc64-smp, linux-image-2.6.32-73-sparc64, linux-image-2.6.32-73-versatile, linux-image-2.6.32-73-server, linux-image-2.6.32-73-386
• USN-2528-1: linux-image-3.13.0-46-generic, linux-image-3.13.0-46-lowlatency, linux-image-3.13.0-46-powerpc-e500mc, linux, linux-image-3.13.0-46-powerpc-smp, linux-image-3.13.0-46-powerpc64-smp, linux-image-3.13.0-46-powerpc64-emb, linux-image-extra-3.13.0-46-generic, linux-image-3.13.0-46-generic-lpae, linux-image-3.13.0-46-powerpc-e500