=========================================================================Ubuntu Security Notice USN-2527-1
March 12, 2015

linux-lts-trusty vulnerability
=========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 12.04 LTS

Summary:

The system could be made to crash or run programs as an administrator.

Software Description:
- linux-lts-trusty: Linux hardware enablement kernel from Trusty

Details:

It was discovered that the Linux kernel's Infiniband subsystem did not
properly sanitize its input parameters while registering memory regions
from userspace. A local user could exploit this flaw to cause a denial of
service (system crash) or to potentially gain administrative privileges.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.04 LTS:
  linux-image-3.13.0-46-generic   3.13.0-46.79~precise1
  linux-image-3.13.0-46-generic-lpae  3.13.0-46.79~precise1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-2527-1
  CVE-2014-8159

Package Information:
  https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-46.79~precise1


Ubuntu 2527-1: Linux kernel (Trusty HWE) vulnerability

March 12, 2015
The system could be made to crash or run programs as an administrator.

Summary

Update Instructions

The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: linux-image-3.13.0-46-generic 3.13.0-46.79~precise1 linux-image-3.13.0-46-generic-lpae 3.13.0-46.79~precise1 After a standard system update you need to reboot your computer to make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2527-1

CVE-2014-8159

Severity
March 12, 2015

Package Information

https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-46.79~precise1

Related News