First published: Thu Mar 12 2015(Updated: )
It was discovered that the Linux kernel's Infiniband subsystem did not properly sanitize its input parameters while registering memory regions from userspace. A local user could exploit this flaw to cause a denial of service (system crash) or to potentially gain administrative privileges.
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-3.16.0-31-generic | <3.16.0-31.43~14.04.1 | 3.16.0-31.43~14.04.1 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.16.0-31-generic-lpae | <3.16.0-31.43~14.04.1 | 3.16.0-31.43~14.04.1 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.16.0-31-lowlatency | <3.16.0-31.43~14.04.1 | 3.16.0-31.43~14.04.1 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.16.0-31-powerpc-e500mc | <3.16.0-31.43~14.04.1 | 3.16.0-31.43~14.04.1 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.16.0-31-powerpc-smp | <3.16.0-31.43~14.04.1 | 3.16.0-31.43~14.04.1 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.16.0-31-powerpc64-emb | <3.16.0-31.43~14.04.1 | 3.16.0-31.43~14.04.1 |
Ubuntu 22.04 LTS | =14.04 | |
All of | ||
ubuntu/linux-image-3.16.0-31-powerpc64-smp | <3.16.0-31.43~14.04.1 | 3.16.0-31.43~14.04.1 |
Ubuntu 22.04 LTS | =14.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
USN-2529-1 is classified as a high severity vulnerability due to its potential to cause a denial of service and allow unauthorized administrative access.
To fix USN-2529-1, update your system to the latest kernel version 3.16.0-31.43~14.04.1.
USN-2529-1 affects Ubuntu 14.04 systems running specific versions of the Linux kernel and Infiniband subsystem.
Yes, after applying the patch for USN-2529-1, your system will be protected from the vulnerabilities associated with this advisory.
No, USN-2529-1 can only be exploited by local users who can access the system.