First published: Sat Jul 05 2014(Updated: )
Andy Lutomirski discovered a flaw with the Linux kernel's ptrace syscall on x86_64 processors. An attacker could exploit this flaw to cause a denial of service (System Crash) or potential gain administrative privileges.
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-3.13.0-30-generic | <3.13.0-30.55 | 3.13.0-30.55 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.13.0-30-generic-lpae | <3.13.0-30.55 | 3.13.0-30.55 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.13.0-30-lowlatency | <3.13.0-30.55 | 3.13.0-30.55 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.13.0-30-powerpc-e500 | <3.13.0-30.55 | 3.13.0-30.55 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.13.0-30-powerpc-e500mc | <3.13.0-30.55 | 3.13.0-30.55 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.13.0-30-powerpc-smp | <3.13.0-30.55 | 3.13.0-30.55 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.13.0-30-powerpc64-emb | <3.13.0-30.55 | 3.13.0-30.55 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.13.0-30-powerpc64-smp | <3.13.0-30.55 | 3.13.0-30.55 |
Ubuntu 22.04 LTS | =14.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of USN-2274-1 is critical as it may allow an attacker to gain administrative privileges or cause a denial of service.
To fix USN-2274-1, update your Linux kernel to version 3.13.0-30.55 or higher.
USN-2274-1 affects Ubuntu 14.04 systems running the Linux kernel version prior to 3.13.0-30.55.
The vulnerability in USN-2274-1 is related to a flaw in the ptrace syscall on x86_64 processors.
Yes, exploitation of the USN-2274-1 vulnerability can lead to a denial of service, resulting in a system crash.