{"id":"USN-2447-2","aliases":[],"status":"published","title":"linux-lts-utopic regression","description":"USN-2447-1 fixed vulnerabilities in the Linux kernel. Due to an unrelated\nregression TCP Throughput drops to zero for several drivers after upgrading.\nThis update fixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n An information leak in the Linux kernel was discovered that could leak the\n high 16 bits of the kernel stack address on 32-bit Kernel Virtual Machine\n (KVM) paravirt guests. A user in the guest OS could exploit this leak to\n obtain information that could potentially be used to aid in attacking the\n kernel. (CVE-2014-8134)\n \n Rabin Vincent, Robert Swiecki, Russell King discovered that the ftrace\n subsystem of the Linux kernel does not properly handle private syscall\n numbers. A local user could exploit this flaw to cause a denial of service\n (OOPS). (CVE-2014-7826)\n \n A flaw in the handling of malformed ASCONF chunks by SCTP (Stream Control\n Transmission Protocol) implementation in the Linux kernel was discovered. A\n remote attacker could exploit this flaw to cause a denial of service\n (system crash). (CVE-2014-3673)\n \n A flaw in the handling of duplicate ASCONF chunks by SCTP (Stream Control\n Transmission Protocol) implementation in the Linux kernel was discovered. A\n remote attacker could exploit this flaw to cause a denial of service\n (panic). (CVE-2014-3687)\n \n It was discovered that excessive queuing by SCTP (Stream Control\n Transmission Protocol) implementation in the Linux kernel can cause memory\n pressure. A remote attacker could exploit this flaw to cause a denial of\n service. (CVE-2014-3688)\n \n Rabin Vincent, Robert Swiecki, Russell Kinglaw discovered a flaw in how the\n perf subsystem of the Linux kernel handles private systecall numbers. A\n local user could exploit this to cause a denial of service (OOPS) or bypass\n ASLR protections via a crafted application. (CVE-2014-7825)\n \n Andy Lutomirski discovered a flaw in how the Linux kernel handles\n pivot_root when used with a chroot directory. A local user could exploit\n this flaw to cause a denial of service (mount-tree loop). (CVE-2014-7970)\n \n Dmitry Monakhov discovered a race condition in the ext4_file_write_iter\n function of the Linux kernel's ext4 filesystem. A local user could exploit\n this flaw to cause a denial of service (file unavailability).\n (CVE-2014-8086)\n \n The KVM (kernel virtual machine) subsystem of the Linux kernel\n miscalculates the number of memory pages during the handling of a mapping\n failure. A guest OS user could exploit this to cause a denial of service\n (host OS page unpinning) or possibly have unspecified other impact by\n leveraging guest OS privileges. (CVE-2014-8369)\n \n Andy Lutomirski discovered that the Linux kernel does not properly handle\n faults associated with the Stack Segment (SS) register on the x86\n architecture. A local attacker could exploit this flaw to cause a denial of\n service (panic). (CVE-2014-9090)","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2014-12-19T12:49:25Z","modified":"2026-02-10T04:40:51Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","fixed_in":["3.16.0-28.38~14.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"linux-lts-utopic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.16.0-28.38~14.04.1"}]}],"versions":["3.16.0-25.33~14.04.2","3.16.0-26.35~14.04.1","3.16.0-28.37~14.04.1"]}],"references":[{"url":"https://ubuntu.com/security/notices/USN-2447-2","tags":["advisory"]},{"url":"http://bugs.launchpad.net/bugs/1390604","tags":["report"]}],"sources":{"osv":[{"id":"USN-2447-2","title":"linux-lts-utopic regression","description":"USN-2447-1 fixed vulnerabilities in the Linux kernel. Due to an unrelated\nregression TCP Throughput drops to zero for several drivers after upgrading.\nThis update fixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\n An information leak in the Linux kernel was discovered that could leak the\n high 16 bits of the kernel stack address on 32-bit Kernel Virtual Machine\n (KVM) paravirt guests. A user in the guest OS could exploit this leak to\n obtain information that could potentially be used to aid in attacking the\n kernel. (CVE-2014-8134)\n \n Rabin Vincent, Robert Swiecki, Russell King discovered that the ftrace\n subsystem of the Linux kernel does not properly handle private syscall\n numbers. A local user could exploit this flaw to cause a denial of service\n (OOPS). (CVE-2014-7826)\n \n A flaw in the handling of malformed ASCONF chunks by SCTP (Stream Control\n Transmission Protocol) implementation in the Linux kernel was discovered. A\n remote attacker could exploit this flaw to cause a denial of service\n (system crash). (CVE-2014-3673)\n \n A flaw in the handling of duplicate ASCONF chunks by SCTP (Stream Control\n Transmission Protocol) implementation in the Linux kernel was discovered. A\n remote attacker could exploit this flaw to cause a denial of service\n (panic). (CVE-2014-3687)\n \n It was discovered that excessive queuing by SCTP (Stream Control\n Transmission Protocol) implementation in the Linux kernel can cause memory\n pressure. A remote attacker could exploit this flaw to cause a denial of\n service. (CVE-2014-3688)\n \n Rabin Vincent, Robert Swiecki, Russell Kinglaw discovered a flaw in how the\n perf subsystem of the Linux kernel handles private systecall numbers. A\n local user could exploit this to cause a denial of service (OOPS) or bypass\n ASLR protections via a crafted application. (CVE-2014-7825)\n \n Andy Lutomirski discovered a flaw in how the Linux kernel handles\n pivot_root when used with a chroot directory. A local user could exploit\n this flaw to cause a denial of service (mount-tree loop). (CVE-2014-7970)\n \n Dmitry Monakhov discovered a race condition in the ext4_file_write_iter\n function of the Linux kernel's ext4 filesystem. A local user could exploit\n this flaw to cause a denial of service (file unavailability).\n (CVE-2014-8086)\n \n The KVM (kernel virtual machine) subsystem of the Linux kernel\n miscalculates the number of memory pages during the handling of a mapping\n failure. A guest OS user could exploit this to cause a denial of service\n (host OS page unpinning) or possibly have unspecified other impact by\n leveraging guest OS privileges. (CVE-2014-8369)\n \n Andy Lutomirski discovered that the Linux kernel does not properly handle\n faults associated with the Stack Segment (SS) register on the x86\n architecture. A local attacker could exploit this flaw to cause a denial of\n service (panic). (CVE-2014-9090)\n","status":"published","published":"2014-12-19T12:49:25Z","modified":"2026-02-10T04:40:51Z","updated_at":"2026-11-02T16:58:09.227524Z"}]}}