Ubuntu
linux-lts-wily package

CVE-2016-2549

Vivid (15.04)
Bug #1549200

Bug #1549200 reported by Steve Beattie on 2016-02-24

256

This bug affects 1 person

	Status	Importance	Assigned to
linux (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Fix Released	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	Fix Released	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-armadaxp (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-flo (Ubuntu)	New	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	New	Medium	Unassigned
Xenial	New	Medium	Unassigned
Yakkety	New	Medium	Unassigned
linux-goldfish (Ubuntu)	New	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	New	Medium	Unassigned
Xenial	New	Medium	Unassigned
Yakkety	New	Medium	Unassigned
linux-lts-quantal (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-raring (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	New	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-saucy (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	New	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-trusty (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-utopic (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Fix Released	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-vivid (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Fix Released	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-wily (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Fix Released	Medium	Unassigned
Vivid	New	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-lts-xenial (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Fix Committed	Medium	Unassigned
Vivid	New	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-mako (Ubuntu)	New	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	New	Medium	Unassigned
Xenial	New	Medium	Unassigned
Yakkety	New	Medium	Unassigned
linux-manta (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	New	Undecided	Unassigned
Wily	New	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-raspi2 (Ubuntu)	Fix Committed	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	Fix Released	Medium	Unassigned
Xenial	Fix Committed	Medium	Unassigned
Yakkety	Fix Committed	Medium	Unassigned
linux-snapdragon (Ubuntu)	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	New	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned
linux-ti-omap4 (Ubuntu)	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Trusty	Invalid	Medium	Unassigned
Vivid	Won't Fix	Undecided	Unassigned
Wily	Invalid	Medium	Unassigned
Xenial	Invalid	Medium	Unassigned
Yakkety	Invalid	Medium	Unassigned

Bug Description

sound/core/hrtimer.c in the Linux kernel before 4.4.1 does not prevent recursive callback access, which allows local users to cause a denial of service (deadlock) via a crafted ioctl call. However, the previous fix is still insufficient: it may still cause a lockup when the ALSA timer instance reprograms itself in its callback. Then it invokes the start function even in snd_timer_interrupt() that is called in hrtimer callback itself, results in a CPU stall. This is no hypothetical problem but actually triggered by syzkaller fuzzer.

Break-Fix: - 2ba1fe7a06d3624f9a7586d672b55f08f7c670f3

See original description

Tags:

CVE References

2016-2549

Revision history for this message

Steve Beattie (sbeattie) wrote on 2016-02-24:

CVE-2016-2549

tags:	added: kernel-cve-tracking-bug
information type:	Public → Public Security
Changed in linux-lts-trusty (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-trusty (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-trusty (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-wily (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-wily (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-wily (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-quantal (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Wily):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-raring (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-armadaxp (Ubuntu Wily):
status:	New → Invalid
Changed in linux-armadaxp (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-armadaxp (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-lts-xenial (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-xenial (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-xenial (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-lts-saucy (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-manta (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-vivid (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-vivid (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-vivid (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-raspi2 (Ubuntu Precise):
status:	New → Invalid
Changed in linux-raspi2 (Ubuntu Trusty):
status:	New → Invalid
Changed in linux-mako (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-utopic (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-utopic (Ubuntu Wily):
status:	New → Invalid
Changed in linux-lts-utopic (Ubuntu Xenial):
status:	New → Invalid
Changed in linux-goldfish (Ubuntu Precise):
status:	New → Invalid
Changed in linux-flo (Ubuntu Precise):
status:	New → Invalid
description:	updated
Changed in linux-lts-trusty (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-trusty (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-trusty (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-trusty (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-wily (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-xenial (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-xenial (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-xenial (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-xenial (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-saucy (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-manta (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-vivid (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-raspi2 (Ubuntu Trusty):
importance:	Undecided → Medium

Steve Beattie (sbeattie) on 2016-02-24

Changed in linux-mako (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-mako (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-lts-utopic (Ubuntu Trusty):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-goldfish (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Wily):
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Xenial):
importance:	Undecided → Medium
Changed in linux-flo (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium

Steve Beattie (sbeattie) on 2016-03-03

Changed in linux-lts-trusty (Ubuntu Precise):
status:	New → Fix Committed
Changed in linux-lts-wily (Ubuntu Trusty):
status:	New → Fix Committed
Changed in linux (Ubuntu Wily):
status:	New → Fix Committed
Changed in linux (Ubuntu Xenial):
status:	New → Invalid
Changed in linux (Ubuntu Trusty):
status:	New → Fix Committed
Changed in linux-lts-xenial (Ubuntu Trusty):
status:	New → Fix Committed
Changed in linux-lts-vivid (Ubuntu Trusty):
status:	New → Fix Committed
Changed in linux-raspi2 (Ubuntu Wily):
status:	New → Fix Committed
Changed in linux-raspi2 (Ubuntu Xenial):
status:	New → Fix Committed
Changed in linux-lts-utopic (Ubuntu Trusty):
status:	New → Fix Committed

Steve Beattie (sbeattie) on 2016-03-15

Changed in linux-lts-trusty (Ubuntu Precise):
status:	Fix Committed → Fix Released
Changed in linux (Ubuntu Trusty):
status:	Fix Committed → Fix Released
Changed in linux-lts-vivid (Ubuntu Trusty):
status:	Fix Committed → Fix Released
Changed in linux-lts-utopic (Ubuntu Trusty):
status:	Fix Committed → Fix Released

Steve Beattie (sbeattie) on 2016-03-18

Changed in linux-lts-wily (Ubuntu Trusty):
status:	Fix Committed → Fix Released
Changed in linux (Ubuntu Wily):
status:	Fix Committed → Fix Released
Changed in linux-raspi2 (Ubuntu Wily):
status:	Fix Committed → Fix Released

Steve Beattie (sbeattie) on 2016-04-05

Changed in linux (Ubuntu Precise):
status:	New → Fix Committed

Steve Beattie (sbeattie) on 2016-04-19

Changed in linux-manta (Ubuntu Xenial):
status:	New → Invalid

Steve Beattie (sbeattie) on 2016-04-27

Changed in linux-ti-omap4 (Ubuntu Precise):
status:	New → Fix Committed

Steve Beattie (sbeattie) on 2016-05-06

Changed in linux-snapdragon (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Wily):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Xenial):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Yakkety):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-snapdragon (Ubuntu Trusty):
status:	New → Invalid
importance:	Undecided → Medium
description:	updated

Steve Beattie (sbeattie) on 2016-05-10

Changed in linux (Ubuntu Precise):
status:	Fix Committed → Fix Released
Changed in linux-ti-omap4 (Ubuntu Precise):
status:	Fix Committed → Fix Released

Steve Beattie (sbeattie) on 2016-05-13

Changed in linux-armadaxp (Ubuntu Precise):
status:	New → Fix Released

Revision history for this message

Andy Whitcroft (apw) wrote on 2017-10-17: Closing unsupported series nomination.

This bug was nominated against a series that is no longer supported, ie vivid. The bug task representing the vivid nomination is being closed as Won't Fix.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

Changed in linux (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-armadaxp (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-flo (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-goldfish (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-lts-quantal (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-lts-trusty (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-lts-utopic (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-lts-vivid (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-mako (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-raspi2 (Ubuntu Vivid):
status:	New → Won't Fix

Andy Whitcroft (apw) on 2017-10-17

Changed in linux-ti-omap4 (Ubuntu Vivid):
status:	New → Won't Fix

Report a bug

This report contains Public Security information

Everyone can see this security related information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntulinux-lts-wily package

CVE-2016-2549

Bug Description

CVE References

Other bug subscribers

Remote bug watches

Ubuntu
linux-lts-wily package