First published: Thu Jun 05 2014(Updated: )
Pinkie Pie discovered a flaw in the Linux kernel's futex subsystem. An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or gain administrative privileges. (CVE-2014-3153) A flaw was discovered in the vhost-net subsystem of the Linux kernel. Guest OS users could exploit this flaw to cause a denial of service (host OS crash). (CVE-2014-0055) Sasha Levin reported a bug in the Linux kernel's virtual memory management subsystem. An unprivileged local user could exploit this flaw to cause a denial of service (system crash). (CVE-2014-3122)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-3.2.0-64-omap | <3.2.0-64.97 | 3.2.0-64.97 |
Ubuntu 22.04 LTS | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-64-powerpc-smp | <3.2.0-64.97 | 3.2.0-64.97 |
Ubuntu 22.04 LTS | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-64-powerpc64-smp | <3.2.0-64.97 | 3.2.0-64.97 |
Ubuntu 22.04 LTS | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-64-highbank | <3.2.0-64.97 | 3.2.0-64.97 |
Ubuntu 22.04 LTS | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-64-generic | <3.2.0-64.97 | 3.2.0-64.97 |
Ubuntu 22.04 LTS | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-64-virtual | <3.2.0-64.97 | 3.2.0-64.97 |
Ubuntu 22.04 LTS | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-64-generic-pae | <3.2.0-64.97 | 3.2.0-64.97 |
Ubuntu 22.04 LTS | =12.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Contains the following vulnerabilities)
The severity of USN-2235-1 is significant due to the potential for an unprivileged local user to cause a denial of service or gain administrative privileges.
To fix USN-2235-1, update your Linux kernel to version 3.2.0-64.97 or later for Ubuntu 12.04.
USN-2235-1 affects various packages of the Linux kernel on Ubuntu 12.04 including linux-image-3.2.0-64-generic and others.
The vulnerability in USN-2235-1 was discovered by Pinkie Pie.
USN-2235-1 identifies a flaw in the futex subsystem of the Linux kernel, which can be exploited for denial of service or privilege escalation.