Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Ubuntu 14.04 LTS: USN-2948-2 Moderate: Kernel Regression Fix

ubuntu
Calendar Grey April 11, 2016
Scroller Ubuntu
Addresses the bug in Ubuntu 14.04 LTS kernel caused by USN-2948-1. Find more information on the update and associated security vulnerabilities within.
USN 2948-1 introduced a regression in the Ubuntu 14.10 Linux kernel backported to Ubuntu 14.04 LTS.

Summary

USN 2948-1 introduced a regression in the Ubuntu 14.10 Linux kernel

backported to Ubuntu 14.04 LTS.

Software Description:

- linux-lts-utopic: Linux hardware enablement kernel from Utopic for Trusty

Details:

USN-2948-1 fixed vulnerabilities in the Ubuntu 14.10 Linux kernel

backported to Ubuntu 14.04 LTS. An incorrect reference counting

fix in the radeon driver introduced a regression that could cause a

system crash. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Ralf Spenneberg discovered that the USB driver for Clie devices in the

Linux kernel did not properly sanity check the endpoints reported by the

device. An attacker with physical access could cause a denial of service

(system crash). (CVE-2015-7566)

Ralf Spenneberg discovered that the usbvision driver in the Linux kernel

did not properly sanity check the interfaces and endpoints reported by the

device. An attacker with physical access could...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory ubuntu system crash regression fix linux-lts-utopic

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  linux-image-3.16.0-70-generic   3.16.0-70.90~14.04.1
  linux-image-3.16.0-70-generic-lpae  3.16.0-70.90~14.04.1
  linux-image-3.16.0-70-lowlatency  3.16.0-70.90~14.04.1
  linux-image-3.16.0-70-powerpc-e500mc  3.16.0-70.90~14.04.1
  linux-image-3.16.0-70-powerpc-smp  3.16.0-70.90~14.04.1
  linux-image-3.16.0-70-powerpc64-emb  3.16.0-70.90~14.04.1
  linux-image-3.16.0-70-powerpc64-smp  3.16.0-70.90~14.04.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References

https://ubuntu.com/security/notices/USN-2948-2

https://ubuntu.com/security/notices/USN-2948-1

https://bugs.launchpad.net/ubuntu/+source/linux-lts-utopic/+bug/1566726

April 11, 2016

Topics%20covered

Topics Covered

security advisory ubuntu system crash regression fix linux-lts-utopic

Package Information

https://launchpad.net/ubuntu/+source/linux-lts-utopic/3.16.0-70.90~14.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.