USN-2447-1

See a problem?

Source

https://ubuntu.com/security/notices/USN-2447-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-2447-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-2447-1

Related

Published

2014-12-12T07:47:06.518716Z

Modified

2014-12-12T07:47:06.518716Z

Summary

linux-lts-utopic vulnerabilities

Details

Andy Lutomirski discovered that the Linux kernel does not properly handle faults associated with the Stack Segment (SS) register in the x86 architecture. A local attacker could exploit this flaw to gain administrative privileges. (CVE-2014-9322)

An information leak in the Linux kernel was discovered that could leak the high 16 bits of the kernel stack address on 32-bit Kernel Virtual Machine (KVM) paravirt guests. A user in the guest OS could exploit this leak to obtain information that could potentially be used to aid in attacking the kernel. (CVE-2014-8134)

Rabin Vincent, Robert Swiecki, Russell King discovered that the ftrace subsystem of the Linux kernel does not properly handle private syscall numbers. A local user could exploit this flaw to cause a denial of service (OOPS). (CVE-2014-7826)

A flaw in the handling of malformed ASCONF chunks by SCTP (Stream Control Transmission Protocol) implementation in the Linux kernel was discovered. A remote attacker could exploit this flaw to cause a denial of service (system crash). (CVE-2014-3673)

A flaw in the handling of duplicate ASCONF chunks by SCTP (Stream Control Transmission Protocol) implementation in the Linux kernel was discovered. A remote attacker could exploit this flaw to cause a denial of service (panic). (CVE-2014-3687)

It was discovered that excessive queuing by SCTP (Stream Control Transmission Protocol) implementation in the Linux kernel can cause memory pressure. A remote attacker could exploit this flaw to cause a denial of service. (CVE-2014-3688)

Rabin Vincent, Robert Swiecki, Russell Kinglaw discovered a flaw in how the perf subsystem of the Linux kernel handles private systecall numbers. A local user could exploit this to cause a denial of service (OOPS) or bypass ASLR protections via a crafted application. (CVE-2014-7825)

Andy Lutomirski discovered a flaw in how the Linux kernel handles pivot_root when used with a chroot directory. A local user could exploit this flaw to cause a denial of service (mount-tree loop). (CVE-2014-7970)

Dmitry Monakhov discovered a race condition in the ext4filewrite_iter function of the Linux kernel's ext4 filesystem. A local user could exploit this flaw to cause a denial of service (file unavailability). (CVE-2014-8086)

The KVM (kernel virtual machine) subsystem of the Linux kernel miscalculates the number of memory pages during the handling of a mapping failure. A guest OS user could exploit this to cause a denial of service (host OS page unpinning) or possibly have unspecified other impact by leveraging guest OS privileges. (CVE-2014-8369)

Andy Lutomirski discovered that the Linux kernel does not properly handle faults associated with the Stack Segment (SS) register on the x86 architecture. A local attacker could exploit this flaw to cause a denial of service (panic). (CVE-2014-9090)

References

Affected packages

Ubuntu:14.04:LTS / linux-lts-utopic

Package

Name: linux-lts-utopic
Purl: pkg:deb/ubuntu/linux-lts-utopic@3.16.0-28.37~14.04.1?arch=src?distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.16.0-28.37~14.04.1

Affected versions

3.*

3.16.0-25.33~14.04.2

3.16.0-26.35~14.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "linux-lts-utopic-tools-common": "3.16.0-28.37~14.04.1",
            "crypto-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "scsi-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "firewire-core-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "kernel-image-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "ppp-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "input-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "md-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "fs-core-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "storage-core-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "nic-shared-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "nic-shared-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "floppy-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "linux-cloud-tools-3.16.0-28-lowlatency": "3.16.0-28.37~14.04.1",
            "parport-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "linux-image-3.16.0-28-lowlatency": "3.16.0-28.37~14.04.1",
            "squashfs-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "scsi-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "fs-secondary-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "input-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "nic-shared-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "virtio-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "scsi-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "serial-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "parport-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "pata-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "fs-secondary-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "linux-lts-utopic-tools-3.16.0-28": "3.16.0-28.37~14.04.1",
            "plip-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "block-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "linux-headers-3.16.0-28-powerpc64-smp": "3.16.0-28.37~14.04.1",
            "ppp-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "message-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "fs-secondary-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "block-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "kernel-image-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "firewire-core-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "mouse-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "linux-image-3.16.0-28-powerpc-e500mc": "3.16.0-28.37~14.04.1",
            "storage-core-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "usb-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "nic-usb-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "multipath-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "speakup-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "block-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "nic-shared-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "fs-core-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "linux-lts-utopic-udebs-powerpc64-smp": "3.16.0-28.37~14.04.1",
            "firewire-core-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "linux-headers-3.16.0-28-generic-lpae": "3.16.0-28.37~14.04.1",
            "sata-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "nic-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "nic-usb-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "squashfs-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "vlan-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "sata-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "message-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "storage-core-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "crypto-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "ppp-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "linux-headers-3.16.0-28": "3.16.0-28.37~14.04.1",
            "fat-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "pata-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "virtio-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "mouse-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "firewire-core-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "irda-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "kernel-image-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "linux-image-3.16.0-28-powerpc64-emb": "3.16.0-28.37~14.04.1",
            "linux-headers-3.16.0-28-powerpc-smp": "3.16.0-28.37~14.04.1",
            "irda-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "nic-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "linux-tools-3.16.0-28-generic-lpae": "3.16.0-28.37~14.04.1",
            "sata-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "mouse-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "speakup-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "nfs-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "ipmi-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "floppy-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "plip-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "crypto-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "linux-tools-3.16.0-28-lowlatency": "3.16.0-28.37~14.04.1",
            "linux-lts-utopic-udebs-powerpc-e500mc": "3.16.0-28.37~14.04.1",
            "input-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "message-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "linux-image-3.16.0-28-powerpc-smp": "3.16.0-28.37~14.04.1",
            "ppp-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "ipmi-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "nic-pcmcia-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "linux-image-extra-3.16.0-28-generic": "3.16.0-28.37~14.04.1",
            "linux-lts-utopic-udebs-generic": "3.16.0-28.37~14.04.1",
            "scsi-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "fat-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "linux-headers-3.16.0-28-lowlatency": "3.16.0-28.37~14.04.1",
            "nfs-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "plip-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "squashfs-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "irda-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "linux-tools-3.16.0-28-powerpc-smp": "3.16.0-28.37~14.04.1",
            "sata-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "linux-image-3.16.0-28-generic-lpae": "3.16.0-28.37~14.04.1",
            "parport-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "pcmcia-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "virtio-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "nic-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "scsi-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "linux-tools-3.16.0-28-generic": "3.16.0-28.37~14.04.1",
            "kernel-image-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "linux-image-3.16.0-28-generic": "3.16.0-28.37~14.04.1",
            "linux-lts-utopic-cloud-tools-3.16.0-28": "3.16.0-28.37~14.04.1",
            "multipath-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "linux-cloud-tools-3.16.0-28-generic": "3.16.0-28.37~14.04.1",
            "speakup-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "fs-core-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "usb-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "ipmi-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "mouse-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "linux-lts-utopic-udebs-powerpc-smp": "3.16.0-28.37~14.04.1",
            "linux-tools-3.16.0-28-powerpc-e500mc": "3.16.0-28.37~14.04.1",
            "vlan-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "sata-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "message-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "input-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "storage-core-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "linux-lts-utopic-udebs-generic-lpae": "3.16.0-28.37~14.04.1",
            "linux-tools-3.16.0-28-powerpc64-smp": "3.16.0-28.37~14.04.1",
            "fat-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "fat-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "nic-usb-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "virtio-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "ipmi-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "pata-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "squashfs-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "ppp-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "linux-lts-utopic-cloud-tools-common": "3.16.0-28.37~14.04.1",
            "crypto-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "pata-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "vlan-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "usb-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "parport-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "nfs-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "linux-tools-3.16.0-28-powerpc64-emb": "3.16.0-28.37~14.04.1",
            "vlan-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "speakup-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "plip-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "floppy-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "storage-core-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "speakup-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "usb-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "usb-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "input-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "multipath-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "squashfs-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "fs-secondary-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "linux-image-3.16.0-28-powerpc64-smp": "3.16.0-28.37~14.04.1",
            "plip-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "irda-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "block-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "nic-shared-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "md-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "md-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "fs-secondary-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "irda-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "ipmi-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "linux-headers-3.16.0-28-powerpc64-emb": "3.16.0-28.37~14.04.1",
            "nfs-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "md-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "crypto-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "kernel-image-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "md-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "multipath-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "parport-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "fb-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "nfs-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "fs-core-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "floppy-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "linux-headers-3.16.0-28-generic": "3.16.0-28.37~14.04.1",
            "nic-usb-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "multipath-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "mouse-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "nic-usb-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "fat-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "fs-core-modules-3.16.0-28-generic-lpae-di": "3.16.0-28.37~14.04.1",
            "nic-modules-3.16.0-28-powerpc-smp-di": "3.16.0-28.37~14.04.1",
            "pcmcia-storage-modules-3.16.0-28-generic-di": "3.16.0-28.37~14.04.1",
            "block-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "vlan-modules-3.16.0-28-powerpc64-smp-di": "3.16.0-28.37~14.04.1",
            "nic-modules-3.16.0-28-powerpc-e500mc-di": "3.16.0-28.37~14.04.1",
            "linux-headers-3.16.0-28-powerpc-e500mc": "3.16.0-28.37~14.04.1"
        }
    ]
}