Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 585
Alerts This Week
Warning Icon 1 585

Ubuntu 14.04 LTS USN-2643-2 Moderate: System Crash Risk

ubuntu
Calendar Grey June 21, 2015
Dist Ubuntu Esm H88
A bug in the Linux kernel destabilizes Ubuntu 14.04 LTS; systems may fail under specific circumstances, necessitating a patch.
The system could be made to crash under certain conditions.

Summary

The system could be made to crash under certain conditions.

Software Description:

- linux: Linux kernel

Details:

The Fix for CVE-2015-1328 introduced a regression into the Linux kernel's

overlayfs file system. The removal of a directory that only exists on the

lower layer results in a kernel panic.

We apologize for the inconvenience.

Original advisory details:

Philip Pettersson discovered a privilege escalation when using overlayfs

mounts inside of user namespaces. A local user could exploit this flaw to

gain administrative privileges on the system.

Topics%20covered

Topics Covered

security advisory moderate Ubuntu system update Linux kernel regression kernel crash

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  linux-image-3.13.0-55-generic   3.13.0-55.94
  linux-image-3.13.0-55-generic-lpae  3.13.0-55.94
  linux-image-3.13.0-55-lowlatency  3.13.0-55.94
  linux-image-3.13.0-55-powerpc-e500  3.13.0-55.94
  linux-image-3.13.0-55-powerpc-e500mc  3.13.0-55.94
  linux-image-3.13.0-55-powerpc-smp  3.13.0-55.94
  linux-image-3.13.0-55-powerpc64-emb  3.13.0-55.94
  linux-image-3.13.0-55-powerpc64-smp  3.13.0-55.94

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-2643-2

https://ubuntu.com/security/notices/USN-2643-1

https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1465998

Severity
important
Lowest
Low
Medium
High
Critical

June 21, 2015

Topics%20covered

Topics Covered

security advisory moderate Ubuntu system update Linux kernel regression kernel crash

Package Information

https://launchpad.net/ubuntu/+source/linux/3.13.0-55.94

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.