[USN-2599-2] Linux kernel (Utopic HWE) vulnerability

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=xCMe
-----END PGP SIGNATURE-----
==========================================================================
Ubuntu Security Notice USN-2599-2
May 09, 2015

linux-lts-utopic vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 14.04 LTS

Summary:

USN-2599-1 Introduced a regression in the Linux kernel.

Software Description:
- linux-lts-utopic: Linux hardware enablement kernel from Utopic

Details:

USN-2599-1 fixed vulnerabilities in the Linux kernel, however an unrelated
regression in the auditing of some path names was introduced. Due to the
regression the system could crash under certain conditions.

This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

A race condition between chown() and execve() was discovered in the Linux
kernel. A local attacker could exploit this race by using chown on a
setuid-user-binary to gain administrative privileges.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
linux-image-3.16.0-37-generic 3.16.0-37.51~14.04.1
linux-image-3.16.0-37-generic-lpae 3.16.0-37.51~14.04.1
linux-image-3.16.0-37-lowlatency 3.16.0-37.51~14.04.1
linux-image-3.16.0-37-powerpc-e500mc 3.16.0-37.51~14.04.1
linux-image-3.16.0-37-powerpc-smp 3.16.0-37.51~14.04.1
linux-image-3.16.0-37-powerpc64-emb 3.16.0-37.51~14.04.1
linux-image-3.16.0-37-powerpc64-smp 3.16.0-37.51~14.04.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
http://www.ubuntu.com/usn/usn-2599-2
http://www.ubuntu.com/usn/usn-2599-1
https://launchpad.net/bugs/1450442

Package Information:
https://launchpad.net/ubuntu/+source/linux-lts-utopic/3.16.0-37.51~14.04.1