This vulnerability allows local attackers to escalate privileges on affected installations of Canonical Ubuntu. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the tcindex module. The issue results from the lack of validating the existence of an object prior to performing further free operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the kernel.
This vulnerability allows local attackers to escalate privileges on affected installations of Canonical Ubuntu. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the tcindex module. The issue results from the lack of validating the existence of an object prior to performing further free operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the kernel.
Clemens Fries reported that, when using Cinnamon, it was possible to bypass the screensaver lock:
http://seclists.org/oss-sec/2014/q1/327
An attacker with physical access to the machine could use this flaw to take over the locked desktop session.
A patch is currently not yet available.
Last updated 25 August 2025
This vulnerability allows local attackers to escalate privileges on affected installations of Canonical Ubuntu. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the apport package. The issue results from the lack of proper locking when performing operations on a file. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of root.
This vulnerability allows local attackers to escalate privileges on affected installations of Canonical Ubuntu. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the apport package. The issue results from the lack of proper locking when performing operations on a file. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of root.
apparmorparser in the apparmor package before 2.8.95~2430-0ubuntu5.1 in Ubuntu 14.04 allows attackers to bypass AppArmor policies via unspecified vectors, related to a "miscompilation flaw."
End of life: 5/9/2013, End of support: 5/9/2013, Latest version: 11.10
End of life: 5/9/2013, End of support: 5/9/2013, Latest version: 11.10
End of life: 7/12/2024, End of support: 7/12/2024, Latest version: 23.10
End of life: 7/12/2024, End of support: 7/12/2024, Latest version: 23.10
End of life: 7/19/2018, End of support: 7/19/2018, Latest version: 17.10
End of life: 7/19/2018, End of support: 7/19/2018, Latest version: 17.10
End of life: 7/18/2019, End of support: 7/18/2019, Latest version: 18.10
End of life: 7/18/2019, End of support: 7/18/2019, Latest version: 18.10
End of life: 4/2/2019, End of support: 4/2/2019, Latest version: 14.04.6
End of life: 4/2/2019, End of support: 4/2/2019, Latest version: 14.04.6
End of life: 5/31/2025, End of support: 10/1/2022, Latest version: 20.04.6
End of life: 5/31/2025, End of support: 10/1/2022, Latest version: 20.04.6
End of life: 4/30/2011, End of support: 4/30/2011, Latest version: 9.10
End of life: 4/30/2011, End of support: 4/30/2011, Latest version: 9.10
End of life: 2/4/2016, End of support: 2/4/2016, Latest version: 15.04
End of life: 2/4/2016, End of support: 2/4/2016, Latest version: 15.04
End of life: 4/28/2017, End of support: 4/28/2017, Latest version: 12.04.5
End of life: 4/28/2017, End of support: 4/28/2017, Latest version: 12.04.5
End of life: 10/28/2012, End of support: 10/28/2012, Latest version: 11.04
End of life: 10/28/2012, End of support: 10/28/2012, Latest version: 11.04
End of life: 5/31/2023, End of support: 5/31/2023, Latest version: 18.04.6
End of life: 5/31/2023, End of support: 5/31/2023, Latest version: 18.04.6
End of life: 4/18/2009, End of support: 4/18/2009, Latest version: 7.10