Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 569
Alerts This Week
Warning Icon 1 569

Ubuntu 14.04 LTS Advisory USN-2690-1 High: Kernel Non-Maskable Interrupts

ubuntu
Calendar Grey July 28, 2015
Scroller Ubuntu
Critical kernel security updates for Ubuntu 14.04 LTS to address system stability, ensure security, and prevent attacks.
Several security issues were fixed in the kernel.

Summary

Several security issues were fixed in the kernel.

Software Description:

- linux-lts-vivid: Linux hardware enablement kernel from Vivid

Details:

Andy Lutomirski discovered a flaw in the Linux kernel's handling of nested

NMIs (non-maskable interrupts). An unprivileged local user could exploit

this flaw to cause a denial of service (system crash) or potentially

escalate their privileges. (CVE-2015-3290)

Colin King discovered a flaw in the add_key function of the Linux kernel's

keyring subsystem. A local user could exploit this flaw to cause a denial

of service (memory exhaustion). (CVE-2015-1333)

Andy Lutomirski discovered a flaw that allows user to cause the Linux

kernel to ignore some NMIs (non-maskable interrupts). A local unprivileged

user could exploit this flaw to potentially cause the system to miss

important NMIs resulting in unspecified effects. (CVE-2015-3291)

Andy Lutomirski and Petr Matousek discovered that an NMI (non-maskable

interrupt) that ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service high linux-lts-vivid kernel error

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  linux-image-3.19.0-25-generic   3.19.0-25.26~14.04.1
  linux-image-3.19.0-25-generic-lpae  3.19.0-25.26~14.04.1
  linux-image-3.19.0-25-lowlatency  3.19.0-25.26~14.04.1
  linux-image-3.19.0-25-powerpc-e500mc  3.19.0-25.26~14.04.1
  linux-image-3.19.0-25-powerpc-smp  3.19.0-25.26~14.04.1
  linux-image-3.19.0-25-powerpc64-emb  3.19.0-25.26~14.04.1
  linux-image-3.19.0-25-powerpc64-smp  3.19.0-25.26~14.04.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.

References

https://ubuntu.com/security/notices/USN-2690-1

CVE-2015-1333, CVE-2015-3290, CVE-2015-3291, CVE-2015-5157

July 28, 2015

Topics%20covered

Topics Covered

security advisory denial of service high linux-lts-vivid kernel error

Package Information

https://launchpad.net/ubuntu/+source/linux-lts-vivid/3.19.0-25.26~14.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.