=========================================================================Ubuntu Security Notice USN-2642-2 June 21, 2015 linux-lts-trusty regression ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: The system could be made to crash under certain conditions. Software Description: - linux-lts-trusty: Linux hardware enablement kernel from Trusty Details: The Fix for CVE-2015-1328 introduced a regression into the Linux kernel's overlayfs file system. The removal of a directory that only exists on the lower layer results in a kernel panic. We apologize for the inconvenience. Original advisory details: Philip Pettersson discovered a privilege escalation when using overlayfs mounts inside of user namespaces. A local user could exploit this flaw to gain administrative privileges on the system. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: linux-image-3.13.0-55-generic 3.13.0-55.94~precise1 linux-image-3.13.0-55-generic-lpae 3.13.0-55.94~precise1 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2642-2 https://ubuntu.com/security/notices/USN-2642-1 https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1465998 Package Information: https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-55.94~precise1
The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: linux-image-3.13.0-55-generic 3.13.0-55.94~precise1 linux-image-3.13.0-55-generic-lpae 3.13.0-55.94~precise1 After a standard system update you need to reboot your computer to make all the necessary changes.
https://ubuntu.com/security/notices/USN-2642-2
https://ubuntu.com/security/notices/USN-2642-1
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1465998
https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-55.94~precise1
Get the latest Linux and open source security news straight to your inbox.