CVE-2014-7207

Published: 10 November 2014

A certain Debian patch to the IPv6 implementation in the Linux kernel 3.2.x through 3.2.63 does not properly validate arguments in ipv6_select_ident function calls, which allows local users to cause a denial of service (NULL pointer dereference and system crash) by leveraging (1) tun or (2) macvtap device access.

From the Ubuntu Security Team

It was discovered the Linux kernel's implementation of IPv6 did not properly validate arguments in the ipv6_select_ident function. A local user could exploit this flaw to cause a denial of service (system crash) by leveraging tun or macvtap device access.

Notes

Author	Note
jdstrand	android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support per Debian, In 3.2.x introduced 64b5c251d5b2cee4a0f697bfb90d79263f6dd517, a backport of 73f156a6e8c1074ac6327e0abd1169e95eb66463, but missed 916e4cf46d0204806c062c8c6c4d1f633852c5b6

Author

Note

jdstrand

android kernels (flo, goldfish, grouper, maguro, mako and manta) are
not supported on the Ubuntu Touch 14.04 preview kernels
linux-lts-saucy no longer receives official support
linux-lts-quantal no longer receives official support
per Debian, In 3.2.x introduced
64b5c251d5b2cee4a0f697bfb90d79263f6dd517, a backport of
73f156a6e8c1074ac6327e0abd1169e95eb66463, but missed
916e4cf46d0204806c062c8c6c4d1f633852c5b6

Priority

Status

Package	Release	Status
linux Launchpad, Ubuntu, Debian	lucid	Not vulnerable
	precise	Released (3.2.0-72.107)
	trusty	Not vulnerable (3.13.0-37.64)
	upstream	Released (3.16~rc1)
	utopic	Not vulnerable (3.16.0-3.8)
	vivid	Not vulnerable (3.16.0-23.31)
	wily	Not vulnerable (3.19.0-15.15)
	Patches: Introduced by 73f156a6e8c1074ac6327e0abd1169e95eb66463 Fixed by 916e4cf46d0204806c062c8c6c4d1f633852c5b6
linux-armadaxp Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Released (3.2.0-1641.59)
	trusty	Does not exist
	upstream	Released (3.16~rc1)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	This package is not directly supported by the Ubuntu Security Team
linux-ec2 Launchpad, Ubuntu, Debian	lucid	Not vulnerable
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (3.16~rc1)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-flo Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was ignored)
	upstream	Released (3.16~rc1)
	utopic	Not vulnerable
	vivid	Not vulnerable
	wily	Not vulnerable
linux-fsl-imx51 Launchpad, Ubuntu, Debian	lucid	Ignored (end of life)
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (3.16~rc1)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-goldfish Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was ignored)
	upstream	Released (3.16~rc1)
	utopic	Not vulnerable
	vivid	Not vulnerable
	wily	Not vulnerable
linux-grouper Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was ignored)
	upstream	Released (3.16~rc1)
	utopic	Ignored (end of life)
	vivid	Does not exist
	wily	Does not exist
linux-linaro-omap Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Ignored (end of life)
	trusty	Does not exist
	upstream	Released (3.16~rc1)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-linaro-shared Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Ignored (end of life)
	trusty	Does not exist
	upstream	Released (3.16~rc1)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-linaro-vexpress Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Ignored (end of life)
	trusty	Does not exist
	upstream	Released (3.16~rc1)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-lts-quantal Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Not vulnerable
	trusty	Does not exist
	upstream	Released (3.16~rc1)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	This package is not directly supported by the Ubuntu Security Team
linux-lts-raring Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Ignored (end of life, was needs-triage)
	trusty	Does not exist
	upstream	Released (3.16~rc1)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-lts-saucy Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Not vulnerable
	trusty	Does not exist
	upstream	Released (3.16~rc1)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
	This package is not directly supported by the Ubuntu Security Team
linux-lts-trusty Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Not vulnerable (3.13.0-37.64~precise1)
	trusty	Does not exist
	upstream	Released (3.16~rc1)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-lts-utopic Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was not-affected [3.16.0-25.33~14.04.2])
	upstream	Released (3.16~rc1)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-lts-vivid Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was not-affected [3.19.0-18.18~14.04.1])
	upstream	Released (3.16~rc1)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-maguro Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was ignored)
	upstream	Released (3.16~rc1)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-mako Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was ignored)
	upstream	Released (3.16~rc1)
	utopic	Not vulnerable
	vivid	Not vulnerable
	wily	Not vulnerable
linux-manta Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Does not exist
	trusty	Does not exist (trusty was ignored)
	upstream	Released (3.16~rc1)
	utopic	Not vulnerable
	vivid	Not vulnerable
	wily	Not vulnerable
linux-mvl-dove Launchpad, Ubuntu, Debian	lucid	Ignored (end of life)
	precise	Does not exist
	trusty	Does not exist
	upstream	Released (3.16~rc1)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-qcm-msm Launchpad, Ubuntu, Debian	lucid	Ignored (end of life)
	precise	Ignored (end of life)
	trusty	Does not exist
	upstream	Released (3.16~rc1)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist
linux-raspi2 Launchpad, Ubuntu, Debian	precise	Does not exist
	trusty	Does not exist
	upstream	Released (3.16~rc1)
	vivid	Does not exist
	wily	Not vulnerable (4.2.0-1008.12)
linux-ti-omap4 Launchpad, Ubuntu, Debian	lucid	Does not exist
	precise	Released (3.2.0-1456.76)
	trusty	Does not exist
	upstream	Released (3.16~rc1)
	utopic	Does not exist
	vivid	Does not exist
	wily	Does not exist

References

Bugs

https://launchpad.net/bugs/1388974

Join the discussion

Canonical is offering Expanded Security Maintenance

Canonical is offering Ubuntu Expanded Security Maintenance (ESM) for security fixes and essential packages.

Find out more about ESM ›