USN-2644-1: Linux kernel (Utopic HWE) vulnerability
Published Jun 15, 2015
·Updated
Philip Pettersson discovered a privilege escalation when using overlayfs mounts inside of user namespaces. A local user could exploit this flaw to gain administrative privileges on the system.
Affected Software
14 affected componentsFixes available
All of the following
ubuntu/linux-image-3.16.0-41-generic<3.16.0-41.55~14.04.1
3.16.0-41.55~14.04.1
Ubuntu Ubuntu=14.04
All of the following
ubuntu/linux-image-3.16.0-41-generic-lpae<3.16.0-41.55~14.04.1
3.16.0-41.55~14.04.1
Ubuntu Ubuntu=14.04
All of the following
ubuntu/linux-image-3.16.0-41-lowlatency<3.16.0-41.55~14.04.1
3.16.0-41.55~14.04.1
Ubuntu Ubuntu=14.04
All of the following
ubuntu/linux-image-3.16.0-41-powerpc-e500mc<3.16.0-41.55~14.04.1
3.16.0-41.55~14.04.1
Ubuntu Ubuntu=14.04
All of the following
ubuntu/linux-image-3.16.0-41-powerpc-smp<3.16.0-41.55~14.04.1
3.16.0-41.55~14.04.1
Ubuntu Ubuntu=14.04
All of the following
ubuntu/linux-image-3.16.0-41-powerpc64-emb<3.16.0-41.55~14.04.1
3.16.0-41.55~14.04.1
Ubuntu Ubuntu=14.04
All of the following
ubuntu/linux-image-3.16.0-41-powerpc64-smp<3.16.0-41.55~14.04.1
3.16.0-41.55~14.04.1
Ubuntu Ubuntu=14.04
Event History
Jun 15, 2015
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-2644-1?
The severity of USN-2644-1 is high due to the potential for privilege escalation.
2
How do I fix USN-2644-1?
To address USN-2644-1, upgrade the affected Linux kernel packages to version 3.16.0-41.55~14.04.1 or later.
3
Which systems are affected by USN-2644-1?
USN-2644-1 affects Ubuntu 14.04 systems running specific 3.16.0-41 kernel versions.
4
What issue does USN-2644-1 address?
USN-2644-1 addresses a privilege escalation vulnerability when using overlayfs mounts inside user namespaces.
5
Can local users exploit the vulnerability in USN-2644-1?
Yes, local users can exploit the vulnerability in USN-2644-1 to gain administrative privileges.