CVE-2014-4943

Published: 16 July 2014

The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.

From the Ubuntu Security Team

Sasha Levin reported a flaw in the Linux kernel's point-to-point protocol (PPP) when used with the Layer Two Tunneling Protocol (L2TP). A local user could exploit this flaw to gain administrative privileges.

Notes

Author	Note
jdstrand	android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels

Author

Note

jdstrand

android kernels (goldfish, grouper, maguro, mako and manta) are not
supported on the Ubuntu Touch 13.10 preview kernels
android kernels (flo, goldfish, grouper, maguro, mako and manta) are
not supported on the Ubuntu Touch 14.04 preview kernels

Priority

Status

Package	Release	Status
linux Launchpad, Ubuntu, Debian	lucid	Released (2.6.32-64.128)
	precise	Released (3.2.0-67.101)
	saucy	Released (3.11.0-26.45)
	trusty	Released (3.13.0-32.57)
	upstream	Released (3.16~rc6)
	utopic	Not vulnerable (3.16.0-5.10)
	vivid	Not vulnerable (3.16.0-23.31)
	wily	Not vulnerable (3.19.0-15.15)
	Patches: Introduced by 3557baabf28088f49bdf72a048fd33ab62e205b1 Fixed by 3cf521f7dc87c031617fd47e4b7aa2593c2f3daf
linux-armadaxp Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Released (3.2.0-1636.53)
	saucy	Does not exist
	trusty	Does not exist
	upstream	Released (3.16~rc6)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	This package is not directly supported by the Ubuntu Security Team
linux-ec2 Launchpad, Ubuntu, Debian	lucid	Released (2.6.32-368.84)
	precise	Does not exist
	saucy	Does not exist
	trusty	Does not exist
	upstream	Released (3.16~rc6)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-flo Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	saucy	Does not exist
	trusty	Does not exist (trusty was ignored)
	upstream	Released (3.16~rc6)
	utopic	Not vulnerable (3.4.0-3.15)
	vivid	Not vulnerable (3.4.0-3.15)
	wily	Not vulnerable (3.4.0-3.15)
linux-fsl-imx51 Launchpad, Ubuntu, Debian	lucid	Ignored (end of life)
	precise	Does not exist
	saucy	Does not exist
	trusty	Does not exist
	upstream	Released (3.16~rc6)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-goldfish Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	saucy	Ignored
	trusty	Does not exist (trusty was ignored)
	upstream	Released (3.16~rc6)
	utopic	Not vulnerable (3.4.0-4.23)
	vivid	Not vulnerable (3.4.0-4.23)
	wily	Not vulnerable (3.4.0-4.23)
linux-grouper Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	saucy	Ignored
	trusty	Does not exist (trusty was ignored)
	upstream	Released (3.16~rc6)
	utopic	Ignored (end of life)
	vivid	Does not exist
	wily	Does not exist
linux-linaro-omap Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Ignored (end of life)
	saucy	Does not exist
	trusty	Does not exist
	upstream	Released (3.16~rc6)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-linaro-shared Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Ignored (end of life)
	saucy	Does not exist
	trusty	Does not exist
	upstream	Released (3.16~rc6)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-linaro-vexpress Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Ignored (end of life)
	saucy	Does not exist
	trusty	Does not exist
	upstream	Released (3.16~rc6)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-lts-quantal Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Released (3.5.0-54.81~precise1)
	saucy	Does not exist
	trusty	Does not exist
	upstream	Released (3.16~rc6)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-lts-raring Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Released (3.8.0-44.66~precise1)
	saucy	Does not exist
	trusty	Does not exist
	upstream	Released (3.16~rc6)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-lts-saucy Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Released (3.11.0-26.45~precise1)
	saucy	Does not exist
	trusty	Does not exist
	upstream	Released (3.16~rc6)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-lts-trusty Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Released (3.13.0-32.57~precise1)
	saucy	Does not exist
	trusty	Does not exist
	upstream	Released (3.16~rc6)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-lts-utopic Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was not-affected [3.16.0-25.33~14.04.2])
	upstream	Released (3.16~rc6)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-lts-vivid Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was not-affected [3.19.0-18.18~14.04.1])
	upstream	Released (3.16~rc6)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-maguro Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	saucy	Ignored
	trusty	Does not exist (trusty was ignored)
	upstream	Released (3.16~rc6)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-mako Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	saucy	Ignored
	trusty	Does not exist (trusty was ignored)
	upstream	Released (3.16~rc6)
	utopic	Not vulnerable (3.4.0-5.34)
	vivid	Not vulnerable (3.4.0-5.34)
	wily	Not vulnerable (3.4.0-5.34)
linux-manta Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	saucy	Ignored
	trusty	Does not exist (trusty was ignored)
	upstream	Released (3.16~rc6)
	utopic	Not vulnerable (3.4.0-6.29)
	vivid	Not vulnerable (3.4.0-6.29)
	wily	Not vulnerable (3.4.0-6.29)
linux-mvl-dove Launchpad, Ubuntu, Debian	lucid	Ignored (end of life)
	precise	Does not exist
	saucy	Does not exist
	trusty	Does not exist
	upstream	Released (3.16~rc6)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-qcm-msm Launchpad, Ubuntu, Debian	lucid	Ignored (end of life)
	precise	Ignored (end of life)
	saucy	Does not exist
	trusty	Does not exist
	upstream	Released (3.16~rc6)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-raspi2 Launchpad, Ubuntu, Debian	precise	Does not exist
	trusty	Does not exist
	upstream	Released (3.16~rc6)
	vivid	Does not exist
	wily	Not vulnerable (4.2.0-1008.12)
linux-ti-omap4 Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Released (3.2.0-1451.71)
	saucy	Ignored (end of life)
	trusty	Does not exist
	upstream	Released (3.16~rc6)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist

References

Bugs

https://launchpad.net/bugs/1341472

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›