=========================================================================Ubuntu Security Notice USN-2096-1
January 31, 2014

linux vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 13.10

Summary:

The system could be made to crash or run programs as an administrator.

Software Description:
- linux: Linux kernel

Details:

Pageexec reported a bug in the Linux kernel's recvmsg syscall when called
from code using the x32 ABI. An unprivileged local user could exploit this
flaw to cause a denial of service (system crash) or gain administrator
privileges.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 13.10:
  linux-image-3.11.0-15-generic   3.11.0-15.25
  linux-image-3.11.0-15-generic-lpae  3.11.0-15.25

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-2096-1
  CVE-2014-0038

Package Information:
  https://launchpad.net/ubuntu/+source/linux/3.11.0-15.25


Ubuntu 2096-1: Linux kernel vulnerability

January 31, 2014
The system could be made to crash or run programs as an administrator.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 13.10: linux-image-3.11.0-15-generic 3.11.0-15.25 linux-image-3.11.0-15-generic-lpae 3.11.0-15.25 After a standard system update you need to reboot your computer to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2096-1

CVE-2014-0038

Severity
January 31, 2014

Package Information

https://launchpad.net/ubuntu/+source/linux/3.11.0-15.25

Related News