USN-2529-1: Linux kernel (Utopic HWE) vulnerability
It was discovered that the Linux kernel's Infiniband subsystem did not properly sanitize its input parameters while registering memory regions from userspace. A local user could exploit this flaw to cause a denial of service (system crash) or to potentially gain administrative privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-2529-1?
USN-2529-1 is classified as a high severity vulnerability due to its potential to cause a denial of service and allow unauthorized administrative access.
How do I fix USN-2529-1?
To fix USN-2529-1, update your system to the latest kernel version 3.16.0-31.43~14.04.1.
What systems are affected by USN-2529-1?
USN-2529-1 affects Ubuntu 14.04 systems running specific versions of the Linux kernel and Infiniband subsystem.
Is my system safe after applying the USN-2529-1 patch?
Yes, after applying the patch for USN-2529-1, your system will be protected from the vulnerabilities associated with this advisory.
Can remote users exploit the vulnerability in USN-2529-1?
No, USN-2529-1 can only be exploited by local users who can access the system.