USN-2179-1: Linux kernel vulnerabilities
A flaw was discovered in the Kernel Virtual Machine (KVM) subsystem of the Linux kernel. A guest OS user could exploit this flaw to execute arbitrary code on the host OS. (CVE-2014-0049) Al Viro discovered an error in how CIFS in the Linux kernel handles uncached write operations. An unprivileged local user could exploit this flaw to cause a denial of service (system crash), obtain sensitive information from kernel memory, or possibly gain privileges. (CVE-2014-0069)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-2179-1?
USN-2179-1 is classified as a high-severity vulnerability due to the potential for arbitrary code execution on the host OS.
How do I fix USN-2179-1?
To fix USN-2179-1, update the Linux kernel to version 3.11.0-20.34 or later.
Which systems are affected by USN-2179-1?
USN-2179-1 affects Ubuntu 13.10 systems running the linux-image-3.11.0-20-generic-lpae and linux-image-3.11.0-20-generic packages.
What component does USN-2179-1 impact?
USN-2179-1 impacts the Kernel Virtual Machine (KVM) subsystem of the Linux kernel.
What exploits are associated with USN-2179-1?
USN-2179-1 can be exploited by a guest OS user to execute arbitrary code on the host OS, posing a significant security risk.