Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 568
Alerts This Week
Warning Icon 1 568

Ubuntu 12.04 LTS USN-2515-2 Critical: Kernel Regression Denial of Service

ubuntu
Calendar Grey March 4, 2015
Dist Ubuntu Esm H88
Ubuntu Security Notice USN-2515-3 resolves a flaw in Trusty HWE tackling multiple significant kernel vulnerabilities.
USN-2515-1 introduced a regression in the Linux kernel.

Summary

USN-2515-1 introduced a regression in the Linux kernel.

Software Description:

- linux-lts-trusty: Linux hardware enablement kernel from Trusty

Details:

USN-2515-1 fixed vulnerabilities in the Linux kernel. There was an unrelated

regression in the use of the virtual counter (CNTVCT) on arm64 architectures.

This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

A flaw was discovered in the Kernel Virtual Machine's (KVM) emulation of

the SYSTENTER instruction when the guest OS does not initialize the

SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of

service of the guest OS (crash) or potentially gain privileges on the guest

OS. (CVE-2015-0239)

Andy Lutomirski discovered an information leak in the Linux kernel's Thread

Local Storage (TLS) implementation allowing users to bypass the espfix to

obtain information that could be used to bypass the Address Space Layout

Randomization (ASLR) protec...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service critical kernel ubuntu regression linux-lts-trusty

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  linux-image-3.13.0-46-generic   3.13.0-46.77~precise1
  linux-image-3.13.0-46-generic-lpae  3.13.0-46.77~precise1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2515-1

https://bugs.launchpad.net/ubuntu/+source/linux-lts-trusty/+bug/1427297

Severity
critical
Lowest
Low
Medium
High
Critical

March 04, 2015

Topics%20covered

Topics Covered

security advisory denial of service critical kernel ubuntu regression linux-lts-trusty

Package Information

https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-46.77~precise1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.