CVE-2014-8159

[John Johansen]

The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly restrict use of User Verbs for registration of memory regions, which allows local users to access arbitrary physical memory locations, and consequently cause a denial of service (system crash) or gain privileges, by leveraging permissions on a uverbs device under /dev/infiniband/.

Break-Fix: - 8494057ab5e40df590ef6ef7d66324d3ae33356b

[John Johansen (jjohansen)]

CVE-2015-xxxx

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 2.6.32-73.141

---------------
linux (2.6.32-73.141) lucid; urgency=low

  [ Upstream Kernel Changes ]

  * IB/core: Prevent integer overflow in ib_umem_get address arithmetic
    - LP: #1413741
    - CVE-2015-8159
 -- Luis Henriques <email address hidden> Mon, 09 Mar 2015 21:31:18 +0000

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 3.2.0-77.114

---------------
linux (3.2.0-77.114) precise; urgency=low

  [ Upstream Kernel Changes ]

  * IB/core: Prevent integer overflow in ib_umem_get address arithmetic
    - LP: #1413741
    - CVE-2015-8159
 -- Luis Henriques <email address hidden> Mon, 09 Mar 2015 20:50:51 +0000

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 3.13.0-46.79

---------------
linux (3.13.0-46.79) trusty; urgency=low

  [ Upstream Kernel Changes ]

  * IB/core: Prevent integer overflow in ib_umem_get address arithmetic
    - LP: #1413741
    - CVE-2015-8159
 -- Luis Henriques <email address hidden> Mon, 09 Mar 2015 17:42:23 +0000

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 3.16.0-31.43

---------------
linux (3.16.0-31.43) utopic; urgency=low

  [ Upstream Kernel Changes ]

  * IB/core: Prevent integer overflow in ib_umem_get address arithmetic
    - LP: #1413741
    - CVE-2015-8159
 -- Luis Henriques <email address hidden> Mon, 09 Mar 2015 17:08:16 +0000

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux - 3.19.0-9.9

---------------
linux (3.19.0-9.9) vivid; urgency=low

  [ Leann Ogasawara ]

  * Release Tracking Bug
    - LP: #1430930

  [ Shachar Raindel ]

  * SAUCE: IB/core: Prevent integer overflow in ib_umem_get address
    arithmetic
    - LP: #1413741
    - CVE-2014-8159
 -- Leann Ogasawara <email address hidden> Wed, 11 Mar 2015 10:29:17 -0700

[Launchpad Janitor (janitor)]

This bug was fixed in the package linux-ec2 - 2.6.32-377.94

---------------
linux-ec2 (2.6.32-377.94) lucid; urgency=low

  [ Stefan Bader ]

  * Release Tracking Bug
    - LP: #1449524
  * Rebase to Ubuntu-2.6.32-74.142

  [ Ubuntu: 2.6.32-74.142 ]

  * fs: take i_mutex during prepare_binprm for set[ug]id executables
    - LP: #1447373
    - CVE-2015-3339

  [ Ubuntu: 2.6.32-73.141 ]

  * IB/core: Prevent integer overflow in ib_umem_get address arithmetic
    - LP: #1413741
    - CVE-2015-8159

 -- Stefan Bader <email address hidden> Tue, 28 Apr 2015 11:59:29 +0200

[Mathew Hodson (mhodson)]

Vivid and Wily are not affected according to http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-8159.html

[Rolf Leggewie (r0lf)]

lucid has seen the end of its life and is no longer receiving any updates. Marking the lucid task for this ticket as "Won't Fix".

[Andy Whitcroft (apw)]

This bug was nominated against a series that is no longer supported, ie vivid. The bug task representing the vivid nomination is being closed as Won't Fix.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

[Steve Langasek (vorlon)]

The Precise Pangolin has reached end of life, so this bug will not be fixed for that release