USN-3105-1: Linux kernel vulnerability
Published Oct 20, 2016
·Updated
It was discovered that a race condition existed in the memory manager of the Linux kernel when handling copy-on-write breakage of private read-only memory mappings. A local attacker could use this to gain administrative privileges.
Affected Software
16 affected componentsFixes available
All of the following
ubuntu/linux-image-3.13.0-100-generic<3.13.0-100.147
3.13.0-100.147
Ubuntu Ubuntu=14.04
All of the following
ubuntu/linux-image-3.13.0-100-generic-lpae<3.13.0-100.147
3.13.0-100.147
Ubuntu Ubuntu=14.04
All of the following
ubuntu/linux-image-3.13.0-100-lowlatency<3.13.0-100.147
3.13.0-100.147
Ubuntu Ubuntu=14.04
All of the following
ubuntu/linux-image-3.13.0-100-powerpc-e500<3.13.0-100.147
3.13.0-100.147
Ubuntu Ubuntu=14.04
All of the following
ubuntu/linux-image-3.13.0-100-powerpc-e500mc<3.13.0-100.147
3.13.0-100.147
Ubuntu Ubuntu=14.04
All of the following
ubuntu/linux-image-3.13.0-100-powerpc-smp<3.13.0-100.147
3.13.0-100.147
Ubuntu Ubuntu=14.04
All of the following
ubuntu/linux-image-3.13.0-100-powerpc64-emb<3.13.0-100.147
3.13.0-100.147
Ubuntu Ubuntu=14.04
All of the following
ubuntu/linux-image-3.13.0-100-powerpc64-smp<3.13.0-100.147
3.13.0-100.147
Ubuntu Ubuntu=14.04
Event History
Oct 20, 2016
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-3105-1?
USN-3105-1 is classified as a high severity vulnerability due to the potential for local attackers to gain administrative privileges.
2
How do I fix USN-3105-1?
To fix USN-3105-1, upgrade the affected packages to version 3.13.0-100.147 or later.
3
Which systems are affected by USN-3105-1?
USN-3105-1 affects Ubuntu 14.04 systems running specific versions of the linux-image package.
4
What type of vulnerability is USN-3105-1?
USN-3105-1 is a race condition vulnerability found in the memory manager of the Linux kernel.
5
Can USN-3105-1 be exploited remotely?
No, USN-3105-1 requires local access for exploitation, making it less of a risk in remote attacks.