It was discovered that the Linux kernel’s Infiniband subsystem did not properly sanitize its input parameters while registering memory regions from userspace. A local user could exploit this flaw to cause a denial of service (system crash) or to potentially gain administrative privileges.

Update instructions:

The problem can be corrected by updating your system to the following package versions:

Ubuntu 14.10:
linux-image-3.16.0-31-generic 3.16.0-31.43
linux-image-3.16.0-31-generic-lpae 3.16.0-31.43
linux-image-3.16.0-31-lowlatency 3.16.0-31.43
linux-image-3.16.0-31-powerpc-e500mc 3.16.0-31.43
linux-image-3.16.0-31-powerpc-smp 3.16.0-31.43
linux-image-3.16.0-31-powerpc64-emb 3.16.0-31.43
linux-image-3.16.0-31-powerpc64-smp 3.16.0-31.43

After a standard system update you need to reboot your computer to make all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2530-1
CVE-2014-8159

Package Information:
https://launchpad.net/ubuntu/+source/linux/3.16.0-31.43

Uso de cookies

Este sitio web utiliza cookies para que usted tenga la mejor experiencia de usuario. Si continúa navegando está dando su consentimiento para la aceptación de las mencionadas cookies y la aceptación de nuestra política de cookies, pinche el enlace para mayor información.plugin cookies

ACEPTAR
Aviso de cookies