USN-6601-1: Linux kernel vulnerability
It was discovered that the IGMP protocol implementation in the Linux kernel contained a race condition, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-3.13.0-195-genericto a version that resolves this vulnerability.Fixed in 3.13.0-195.246 - Upgrade
Upgrade
ubuntu/linux-image-3.13.0-195-lowlatencyto a version that resolves this vulnerability.Fixed in 3.13.0-195.246 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 3.13.0.195.205 - Upgrade
Upgrade
ubuntu/linux-image-generic-lts-trustyto a version that resolves this vulnerability.Fixed in 3.13.0.195.205 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 3.13.0.195.205 - Upgrade
Upgrade
ubuntu/linux-image-serverto a version that resolves this vulnerability.Fixed in 3.13.0.195.205 - Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 3.13.0.195.205
Event History
Frequently Asked Questions
What is the severity of USN-6601-1?
USN-6601-1 is classified as a medium severity vulnerability due to its potential to cause denial of service or arbitrary code execution.
How do I fix USN-6601-1?
To fix USN-6601-1, upgrade to the patched version of the Linux kernel, specifically linux-image-3.13.0-195.246 or later.
What products are affected by USN-6601-1?
USN-6601-1 affects multiple packages in Ubuntu 14.04, including linux-image and linux-image-lowlatency packages.
How does the USN-6601-1 vulnerability work?
The USN-6601-1 vulnerability occurs due to a race condition in the IGMP protocol implementation, leading to a use-after-free error.
Can USN-6601-1 be exploited remotely?
No, USN-6601-1 requires local access to the system for exploitation.