Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 569
Alerts This Week
Warning Icon 1 569

Ubuntu 14.04 LTS USN-2516-3 Moderate: Kernel Regression Issues

ubuntu
Calendar Grey March 4, 2015
Dist Ubuntu Esm H88
The Ubuntu Security Notice USN-2516-3 tackles various kernel issues in Ubuntu 14.04 LTS, promoting enhanced system reliability.
USN-2516-1 introduced a regression in the Linux kernel.

Summary

USN-2516-1 introduced a regression in the Linux kernel.

Software Description:

- linux: Linux kernel

Details:

USN-2516-1 fixed vulnerabilities in the Linux kernel, and the fix in

USN-2516-2 was incomplete. There was an unrelated regression in the use of

the virtual counter (CNTVCT) on arm64 architectures.

This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

A flaw was discovered in the Kernel Virtual Machine's (KVM) emulation of

the SYSTENTER instruction when the guest OS does not initialize the

SYSENTER MSRs. A guest OS user could exploit this flaw to cause a denial of

service of the guest OS (crash) or potentially gain privileges on the guest

OS. (CVE-2015-0239)

Andy Lutomirski discovered an information leak in the Linux kernel's Thread

Local Storage (TLS) implementation allowing users to bypass the espfix to

obtain information that could be used to bypass the Address Space Layout

Randomization (ASLR) prot...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory moderate denial of service information leak Ubuntu system update kernel regression

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  linux-image-3.13.0-46-generic   3.13.0-46.77
  linux-image-3.13.0-46-generic-lpae  3.13.0-46.77
  linux-image-3.13.0-46-lowlatency  3.13.0-46.77
  linux-image-3.13.0-46-powerpc-e500  3.13.0-46.77
  linux-image-3.13.0-46-powerpc-e500mc  3.13.0-46.77
  linux-image-3.13.0-46-powerpc-smp  3.13.0-46.77
  linux-image-3.13.0-46-powerpc64-emb  3.13.0-46.77
  linux-image-3.13.0-46-powerpc64-smp  3.13.0-46.77

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2516-1

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1427292

March 04, 2015

Topics%20covered

Topics Covered

security advisory moderate denial of service information leak Ubuntu system update kernel regression

Package Information

https://launchpad.net/ubuntu/+source/linux/3.13.0-46.77

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.