First published: Thu Jun 05 2014(Updated: )
Pinkie Pie discovered a flaw in the Linux kernel's futex subsystem. An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or gain administrative privileges. (CVE-2014-3153) An information leak was discovered in the netfilter subsystem of the Linux kernel. An attacker could exploit this flaw to obtain sensitive information from kernel memory. (CVE-2014-2568) Sasha Levin reported a bug in the Linux kernel's virtual memory management subsystem. An unprivileged local user could exploit this flaw to cause a denial of service (system crash). (CVE-2014-3122)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-3.13.0-29-generic | <3.13.0-29.53 | 3.13.0-29.53 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.13.0-29-generic-lpae | <3.13.0-29.53 | 3.13.0-29.53 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.13.0-29-lowlatency | <3.13.0-29.53 | 3.13.0-29.53 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.13.0-29-powerpc-e500 | <3.13.0-29.53 | 3.13.0-29.53 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.13.0-29-powerpc-e500mc | <3.13.0-29.53 | 3.13.0-29.53 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.13.0-29-powerpc-smp | <3.13.0-29.53 | 3.13.0-29.53 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.13.0-29-powerpc64-emb | <3.13.0-29.53 | 3.13.0-29.53 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.13.0-29-powerpc64-smp | <3.13.0-29.53 | 3.13.0-29.53 |
Ubuntu 22.04 LTS | =14.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Contains the following vulnerabilities)
The severity of USN-2240-1 is critical due to the potential for system crashes and unauthorized administrative access.
To fix USN-2240-1, upgrade to the Linux kernel version 3.13.0-29.53 or later.
USN-2240-1 affects Ubuntu 14.04 with the Linux kernel versions prior to 3.13.0-29.53.
No, USN-2240-1 requires local access for exploitation.
USN-2240-1 can be exploited for denial of service or to gain escalated privileges.