Stay Secure with the Latest Linux Advisories

security advisorydenial of serviceadministrative access

Ubuntu 12.04 LTS USN-2527-1 Critical Linux Kernel Denial of Service

The system could be made to crash or run programs as an administrator.. =========================================================================Ubuntu Security Notice USN-2527-1 March 12, 2015 linux-lts-trusty vulnerability ========================================================================= A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: The system could be made to crash or run programs as an administrator. Software Description: - linux-lts-trusty: Linux hardware enablement kernel from Trusty Details: It was discovered that the Linux kernel's Infiniband subsystem did not properly sanitize its input parameters while registering memory regions from userspace. A local user could exploit this flaw to cause a denial of service (system crash) or to potentially gain administrative privileges. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: linux-image-3.13.0-46-generic 3.13.0-46.79~precise1 linux-image-3.13.0-46-generic-lpae 3.13.0-46.79~precise1 After a standard system update you need to reboot your computer to make all the necessary changes. References: https://ubuntu.com/security/notices/USN-2527-1 CVE-2014-8159 Package Information: https://launchpad.net/ubuntu/+source/linux-lts-trusty/3.13.0-46.79~precise1 . Vulnerability discovered in Linux kernel for Ubuntu may result in system instability or allow unauthorized administrative privileges. Immediate update recommended for security.. Linux Kernel Flaw, Ubuntu Security Notice, Trusty HWE Update. . LinuxSecurity.com Team

Mar 12, 2015 Ubuntu