[USN-2665-1] Linux kernel (Vivid HWE) vulnerabilities

Severity Medium

Affected Packages 8

CVEs 5

Several security issues were fixed in the kernel.

A race condition was discovered in the Linux kernel's file_handle size
verification. A local user could exploit this flaw to read potentially
sensative memory locations. (CVE-2015-1420)

A underflow error was discovered in the Linux kernel's Ozmo Devices USB
over WiFi host controller driver. A remote attacker could exploit this flaw
to cause a denial of service (system crash) or potentially execute
arbitrary code via a specially crafted packet. (CVE-2015-4001)

A bounds check error was discovered in the Linux kernel's Ozmo Devices USB
over WiFi host controller driver. A remote attacker could exploit this flaw
to cause a denial of service (system crash) or potentially execute
arbitrary code via a specially crafted packet. (CVE-2015-4002)

A division by zero error was discovered in the Linux kernel's Ozmo Devices
USB over WiFi host controller driver. A remote attacker could exploit this
flaw to cause a denial of service (system crash). (CVE-2015-4003)

A double free flaw was discovered in the Linux kernel's path lookup. A
local user could cause a denial of service (Oops). (CVE-2015-5706)

Package	Affected Version
pkg:deb/ubuntu/linux-image-extra-3.19.0-22-generic?distro=trusty	< 3.19.0-22.22~14.04.1
pkg:deb/ubuntu/linux-image-3.19.0-22-powerpc64-smp?distro=trusty	< 3.19.0-22.22~14.04.1
pkg:deb/ubuntu/linux-image-3.19.0-22-powerpc64-emb?distro=trusty	< 3.19.0-22.22~14.04.1
pkg:deb/ubuntu/linux-image-3.19.0-22-powerpc-smp?distro=trusty	< 3.19.0-22.22~14.04.1
pkg:deb/ubuntu/linux-image-3.19.0-22-powerpc-e500mc?distro=trusty	< 3.19.0-22.22~14.04.1
pkg:deb/ubuntu/linux-image-3.19.0-22-lowlatency?distro=trusty	< 3.19.0-22.22~14.04.1
pkg:deb/ubuntu/linux-image-3.19.0-22-generic?distro=trusty	< 3.19.0-22.22~14.04.1
pkg:deb/ubuntu/linux-image-3.19.0-22-generic-lpae?distro=trusty	< 3.19.0-22.22~14.04.1

ID

USN-2665-1

Severity

medium

URL

https://ubuntu.com/security/notices/USN-2665-1

Published

2015-07-07T09:44:09
(9 years ago)

Modified

2015-07-07T09:44:09
(9 years ago)

Other Advisories

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform
Affected	pkg:deb/ubuntu/linux-image-extra-3.19.0-22-generic?distro=trusty	ubuntu	linux-image-extra-3.19.0-22-generic	< 3.19.0-22.22~14.04.1	trusty
Affected	pkg:deb/ubuntu/linux-image-3.19.0-22-powerpc64-smp?distro=trusty	ubuntu	linux-image-3.19.0-22-powerpc64-smp	< 3.19.0-22.22~14.04.1	trusty
Affected	pkg:deb/ubuntu/linux-image-3.19.0-22-powerpc64-emb?distro=trusty	ubuntu	linux-image-3.19.0-22-powerpc64-emb	< 3.19.0-22.22~14.04.1	trusty
Affected	pkg:deb/ubuntu/linux-image-3.19.0-22-powerpc-smp?distro=trusty	ubuntu	linux-image-3.19.0-22-powerpc-smp	< 3.19.0-22.22~14.04.1	trusty
Affected	pkg:deb/ubuntu/linux-image-3.19.0-22-powerpc-e500mc?distro=trusty	ubuntu	linux-image-3.19.0-22-powerpc-e500mc	< 3.19.0-22.22~14.04.1	trusty
Affected	pkg:deb/ubuntu/linux-image-3.19.0-22-lowlatency?distro=trusty	ubuntu	linux-image-3.19.0-22-lowlatency	< 3.19.0-22.22~14.04.1	trusty
Affected	pkg:deb/ubuntu/linux-image-3.19.0-22-generic?distro=trusty	ubuntu	linux-image-3.19.0-22-generic	< 3.19.0-22.22~14.04.1	trusty
Affected	pkg:deb/ubuntu/linux-image-3.19.0-22-generic-lpae?distro=trusty	ubuntu	linux-image-3.19.0-22-generic-lpae	< 3.19.0-22.22~14.04.1	trusty

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date