kernel-packages team mailing list archive
-
kernel-packages team
-
Mailing list archive
-
Message #177812
[Bug 1580365] [NEW] CVE-2015-0571
*** This bug is a security vulnerability ***
Public security bug reported:
The WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in
Qualcomm Innovation Center (QuIC) Android contributions for MSM devices
and other products, does not verify authorization for private SET IOCTL
calls, which allows attackers to gain privileges via a crafted
application, related to wlan_hdd_hostapd.c and wlan_hdd_wext.c.
** Affects: linux (Ubuntu)
Importance: Medium
Status: New
** Affects: linux-armadaxp (Ubuntu)
Importance: Medium
Status: Invalid
** Affects: linux-flo (Ubuntu)
Importance: Medium
Status: New
** Affects: linux-goldfish (Ubuntu)
Importance: Medium
Status: New
** Affects: linux-lts-quantal (Ubuntu)
Importance: Medium
Status: Invalid
** Affects: linux-lts-raring (Ubuntu)
Importance: Medium
Status: Invalid
** Affects: linux-lts-saucy (Ubuntu)
Importance: Medium
Status: Invalid
** Affects: linux-lts-trusty (Ubuntu)
Importance: Medium
Status: Invalid
** Affects: linux-lts-utopic (Ubuntu)
Importance: Medium
Status: Invalid
** Affects: linux-lts-vivid (Ubuntu)
Importance: Medium
Status: Invalid
** Affects: linux-lts-wily (Ubuntu)
Importance: Medium
Status: Invalid
** Affects: linux-lts-xenial (Ubuntu)
Importance: Medium
Status: Invalid
** Affects: linux-mako (Ubuntu)
Importance: Medium
Status: New
** Affects: linux-manta (Ubuntu)
Importance: Medium
Status: Invalid
** Affects: linux-raspi2 (Ubuntu)
Importance: Medium
Status: New
** Affects: linux-snapdragon (Ubuntu)
Importance: Medium
Status: New
** Affects: linux-ti-omap4 (Ubuntu)
Importance: Medium
Status: Invalid
** Affects: linux (Ubuntu Precise)
Importance: Medium
Status: New
** Affects: linux-armadaxp (Ubuntu Precise)
Importance: Medium
Status: New
** Affects: linux-flo (Ubuntu Precise)
Importance: Medium
Status: Invalid
** Affects: linux-goldfish (Ubuntu Precise)
Importance: Medium
Status: Invalid
** Affects: linux-lts-quantal (Ubuntu Precise)
Importance: Medium
Status: Invalid
** Affects: linux-lts-raring (Ubuntu Precise)
Importance: Medium
Status: Invalid
** Affects: linux-lts-saucy (Ubuntu Precise)
Importance: Medium
Status: Invalid
** Affects: linux-lts-trusty (Ubuntu Precise)
Importance: Medium
Status: New
** Affects: linux-lts-utopic (Ubuntu Precise)
Importance: Medium
Status: Invalid
** Affects: linux-lts-vivid (Ubuntu Precise)
Importance: Medium
Status: Invalid
** Affects: linux-lts-wily (Ubuntu Precise)
Importance: Medium
Status: Invalid
** Affects: linux-lts-xenial (Ubuntu Precise)
Importance: Medium
Status: Invalid
** Affects: linux-mako (Ubuntu Precise)
Importance: Medium
Status: Invalid
** Affects: linux-manta (Ubuntu Precise)
Importance: Medium
Status: Invalid
** Affects: linux-raspi2 (Ubuntu Precise)
Importance: Medium
Status: Invalid
** Affects: linux-snapdragon (Ubuntu Precise)
Importance: Medium
Status: Invalid
** Affects: linux-ti-omap4 (Ubuntu Precise)
Importance: Medium
Status: New
** Affects: linux (Ubuntu Trusty)
Importance: Medium
Status: New
** Affects: linux-armadaxp (Ubuntu Trusty)
Importance: Medium
Status: Invalid
** Affects: linux-flo (Ubuntu Trusty)
Importance: Medium
Status: Invalid
** Affects: linux-goldfish (Ubuntu Trusty)
Importance: Medium
Status: Invalid
** Affects: linux-lts-quantal (Ubuntu Trusty)
Importance: Medium
Status: Invalid
** Affects: linux-lts-raring (Ubuntu Trusty)
Importance: Medium
Status: Invalid
** Affects: linux-lts-saucy (Ubuntu Trusty)
Importance: Medium
Status: Invalid
** Affects: linux-lts-trusty (Ubuntu Trusty)
Importance: Medium
Status: Invalid
** Affects: linux-lts-utopic (Ubuntu Trusty)
Importance: Medium
Status: New
** Affects: linux-lts-vivid (Ubuntu Trusty)
Importance: Medium
Status: New
** Affects: linux-lts-wily (Ubuntu Trusty)
Importance: Medium
Status: New
** Affects: linux-lts-xenial (Ubuntu Trusty)
Importance: Medium
Status: New
** Affects: linux-mako (Ubuntu Trusty)
Importance: Medium
Status: Invalid
** Affects: linux-manta (Ubuntu Trusty)
Importance: Medium
Status: Invalid
** Affects: linux-raspi2 (Ubuntu Trusty)
Importance: Medium
Status: Invalid
** Affects: linux-snapdragon (Ubuntu Trusty)
Importance: Medium
Status: Invalid
** Affects: linux-ti-omap4 (Ubuntu Trusty)
Importance: Medium
Status: Invalid
** Affects: linux (Ubuntu Vivid)
Importance: Undecided
Status: New
** Affects: linux-armadaxp (Ubuntu Vivid)
Importance: Undecided
Status: New
** Affects: linux-flo (Ubuntu Vivid)
Importance: Undecided
Status: New
** Affects: linux-goldfish (Ubuntu Vivid)
Importance: Undecided
Status: New
** Affects: linux-lts-quantal (Ubuntu Vivid)
Importance: Undecided
Status: New
** Affects: linux-lts-raring (Ubuntu Vivid)
Importance: Undecided
Status: New
** Affects: linux-lts-saucy (Ubuntu Vivid)
Importance: Undecided
Status: New
** Affects: linux-lts-trusty (Ubuntu Vivid)
Importance: Undecided
Status: New
** Affects: linux-lts-utopic (Ubuntu Vivid)
Importance: Undecided
Status: New
** Affects: linux-lts-vivid (Ubuntu Vivid)
Importance: Undecided
Status: New
** Affects: linux-lts-wily (Ubuntu Vivid)
Importance: Undecided
Status: New
** Affects: linux-lts-xenial (Ubuntu Vivid)
Importance: Undecided
Status: New
** Affects: linux-mako (Ubuntu Vivid)
Importance: Undecided
Status: New
** Affects: linux-manta (Ubuntu Vivid)
Importance: Undecided
Status: New
** Affects: linux-raspi2 (Ubuntu Vivid)
Importance: Undecided
Status: New
** Affects: linux-snapdragon (Ubuntu Vivid)
Importance: Undecided
Status: New
** Affects: linux-ti-omap4 (Ubuntu Vivid)
Importance: Undecided
Status: New
** Affects: linux (Ubuntu Wily)
Importance: Medium
Status: New
** Affects: linux-armadaxp (Ubuntu Wily)
Importance: Medium
Status: Invalid
** Affects: linux-flo (Ubuntu Wily)
Importance: Medium
Status: New
** Affects: linux-goldfish (Ubuntu Wily)
Importance: Medium
Status: New
** Affects: linux-lts-quantal (Ubuntu Wily)
Importance: Medium
Status: Invalid
** Affects: linux-lts-raring (Ubuntu Wily)
Importance: Medium
Status: Invalid
** Affects: linux-lts-saucy (Ubuntu Wily)
Importance: Medium
Status: Invalid
** Affects: linux-lts-trusty (Ubuntu Wily)
Importance: Medium
Status: Invalid
** Affects: linux-lts-utopic (Ubuntu Wily)
Importance: Medium
Status: Invalid
** Affects: linux-lts-vivid (Ubuntu Wily)
Importance: Medium
Status: Invalid
** Affects: linux-lts-wily (Ubuntu Wily)
Importance: Medium
Status: Invalid
** Affects: linux-lts-xenial (Ubuntu Wily)
Importance: Medium
Status: Invalid
** Affects: linux-mako (Ubuntu Wily)
Importance: Medium
Status: New
** Affects: linux-manta (Ubuntu Wily)
Importance: Medium
Status: New
** Affects: linux-raspi2 (Ubuntu Wily)
Importance: Medium
Status: New
** Affects: linux-snapdragon (Ubuntu Wily)
Importance: Medium
Status: Invalid
** Affects: linux-ti-omap4 (Ubuntu Wily)
Importance: Medium
Status: Invalid
** Affects: linux (Ubuntu Xenial)
Importance: Medium
Status: New
** Affects: linux-armadaxp (Ubuntu Xenial)
Importance: Medium
Status: Invalid
** Affects: linux-flo (Ubuntu Xenial)
Importance: Medium
Status: New
** Affects: linux-goldfish (Ubuntu Xenial)
Importance: Medium
Status: New
** Affects: linux-lts-quantal (Ubuntu Xenial)
Importance: Medium
Status: Invalid
** Affects: linux-lts-raring (Ubuntu Xenial)
Importance: Medium
Status: Invalid
** Affects: linux-lts-saucy (Ubuntu Xenial)
Importance: Medium
Status: Invalid
** Affects: linux-lts-trusty (Ubuntu Xenial)
Importance: Medium
Status: Invalid
** Affects: linux-lts-utopic (Ubuntu Xenial)
Importance: Medium
Status: Invalid
** Affects: linux-lts-vivid (Ubuntu Xenial)
Importance: Medium
Status: Invalid
** Affects: linux-lts-wily (Ubuntu Xenial)
Importance: Medium
Status: Invalid
** Affects: linux-lts-xenial (Ubuntu Xenial)
Importance: Medium
Status: Invalid
** Affects: linux-mako (Ubuntu Xenial)
Importance: Medium
Status: New
** Affects: linux-manta (Ubuntu Xenial)
Importance: Medium
Status: Invalid
** Affects: linux-raspi2 (Ubuntu Xenial)
Importance: Medium
Status: New
** Affects: linux-snapdragon (Ubuntu Xenial)
Importance: Medium
Status: New
** Affects: linux-ti-omap4 (Ubuntu Xenial)
Importance: Medium
Status: Invalid
** Affects: linux (Ubuntu Yakkety)
Importance: Medium
Status: New
** Affects: linux-armadaxp (Ubuntu Yakkety)
Importance: Medium
Status: Invalid
** Affects: linux-flo (Ubuntu Yakkety)
Importance: Medium
Status: New
** Affects: linux-goldfish (Ubuntu Yakkety)
Importance: Medium
Status: New
** Affects: linux-lts-quantal (Ubuntu Yakkety)
Importance: Medium
Status: Invalid
** Affects: linux-lts-raring (Ubuntu Yakkety)
Importance: Medium
Status: Invalid
** Affects: linux-lts-saucy (Ubuntu Yakkety)
Importance: Medium
Status: Invalid
** Affects: linux-lts-trusty (Ubuntu Yakkety)
Importance: Medium
Status: Invalid
** Affects: linux-lts-utopic (Ubuntu Yakkety)
Importance: Medium
Status: Invalid
** Affects: linux-lts-vivid (Ubuntu Yakkety)
Importance: Medium
Status: Invalid
** Affects: linux-lts-wily (Ubuntu Yakkety)
Importance: Medium
Status: Invalid
** Affects: linux-lts-xenial (Ubuntu Yakkety)
Importance: Medium
Status: Invalid
** Affects: linux-mako (Ubuntu Yakkety)
Importance: Medium
Status: New
** Affects: linux-manta (Ubuntu Yakkety)
Importance: Medium
Status: Invalid
** Affects: linux-raspi2 (Ubuntu Yakkety)
Importance: Medium
Status: New
** Affects: linux-snapdragon (Ubuntu Yakkety)
Importance: Medium
Status: New
** Affects: linux-ti-omap4 (Ubuntu Yakkety)
Importance: Medium
Status: Invalid
** Tags: kernel-cve-tracking-bug
** Tags added: kernel-cve-tracking-bug
** Information type changed from Public to Public Security
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2015-0571
--
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1580365
Title:
CVE-2015-0571
Status in linux package in Ubuntu:
New
Status in linux-armadaxp package in Ubuntu:
Invalid
Status in linux-flo package in Ubuntu:
New
Status in linux-goldfish package in Ubuntu:
New
Status in linux-lts-quantal package in Ubuntu:
Invalid
Status in linux-lts-raring package in Ubuntu:
Invalid
Status in linux-lts-saucy package in Ubuntu:
Invalid
Status in linux-lts-trusty package in Ubuntu:
Invalid
Status in linux-lts-utopic package in Ubuntu:
Invalid
Status in linux-lts-vivid package in Ubuntu:
Invalid
Status in linux-lts-wily package in Ubuntu:
Invalid
Status in linux-lts-xenial package in Ubuntu:
Invalid
Status in linux-mako package in Ubuntu:
New
Status in linux-manta package in Ubuntu:
Invalid
Status in linux-raspi2 package in Ubuntu:
New
Status in linux-snapdragon package in Ubuntu:
New
Status in linux-ti-omap4 package in Ubuntu:
Invalid
Status in linux source package in Precise:
New
Status in linux-armadaxp source package in Precise:
New
Status in linux-flo source package in Precise:
Invalid
Status in linux-goldfish source package in Precise:
Invalid
Status in linux-lts-quantal source package in Precise:
Invalid
Status in linux-lts-raring source package in Precise:
Invalid
Status in linux-lts-saucy source package in Precise:
Invalid
Status in linux-lts-trusty source package in Precise:
New
Status in linux-lts-utopic source package in Precise:
Invalid
Status in linux-lts-vivid source package in Precise:
Invalid
Status in linux-lts-wily source package in Precise:
Invalid
Status in linux-lts-xenial source package in Precise:
Invalid
Status in linux-mako source package in Precise:
Invalid
Status in linux-manta source package in Precise:
Invalid
Status in linux-raspi2 source package in Precise:
Invalid
Status in linux-snapdragon source package in Precise:
Invalid
Status in linux-ti-omap4 source package in Precise:
New
Status in linux source package in Trusty:
New
Status in linux-armadaxp source package in Trusty:
Invalid
Status in linux-flo source package in Trusty:
Invalid
Status in linux-goldfish source package in Trusty:
Invalid
Status in linux-lts-quantal source package in Trusty:
Invalid
Status in linux-lts-raring source package in Trusty:
Invalid
Status in linux-lts-saucy source package in Trusty:
Invalid
Status in linux-lts-trusty source package in Trusty:
Invalid
Status in linux-lts-utopic source package in Trusty:
New
Status in linux-lts-vivid source package in Trusty:
New
Status in linux-lts-wily source package in Trusty:
New
Status in linux-lts-xenial source package in Trusty:
New
Status in linux-mako source package in Trusty:
Invalid
Status in linux-manta source package in Trusty:
Invalid
Status in linux-raspi2 source package in Trusty:
Invalid
Status in linux-snapdragon source package in Trusty:
Invalid
Status in linux-ti-omap4 source package in Trusty:
Invalid
Status in linux source package in Vivid:
New
Status in linux-armadaxp source package in Vivid:
New
Status in linux-flo source package in Vivid:
New
Status in linux-goldfish source package in Vivid:
New
Status in linux-lts-quantal source package in Vivid:
New
Status in linux-lts-raring source package in Vivid:
New
Status in linux-lts-saucy source package in Vivid:
New
Status in linux-lts-trusty source package in Vivid:
New
Status in linux-lts-utopic source package in Vivid:
New
Status in linux-lts-vivid source package in Vivid:
New
Status in linux-lts-wily source package in Vivid:
New
Status in linux-lts-xenial source package in Vivid:
New
Status in linux-mako source package in Vivid:
New
Status in linux-manta source package in Vivid:
New
Status in linux-raspi2 source package in Vivid:
New
Status in linux-snapdragon source package in Vivid:
New
Status in linux-ti-omap4 source package in Vivid:
New
Status in linux source package in Wily:
New
Status in linux-armadaxp source package in Wily:
Invalid
Status in linux-flo source package in Wily:
New
Status in linux-goldfish source package in Wily:
New
Status in linux-lts-quantal source package in Wily:
Invalid
Status in linux-lts-raring source package in Wily:
Invalid
Status in linux-lts-saucy source package in Wily:
Invalid
Status in linux-lts-trusty source package in Wily:
Invalid
Status in linux-lts-utopic source package in Wily:
Invalid
Status in linux-lts-vivid source package in Wily:
Invalid
Status in linux-lts-wily source package in Wily:
Invalid
Status in linux-lts-xenial source package in Wily:
Invalid
Status in linux-mako source package in Wily:
New
Status in linux-manta source package in Wily:
New
Status in linux-raspi2 source package in Wily:
New
Status in linux-snapdragon source package in Wily:
Invalid
Status in linux-ti-omap4 source package in Wily:
Invalid
Status in linux source package in Xenial:
New
Status in linux-armadaxp source package in Xenial:
Invalid
Status in linux-flo source package in Xenial:
New
Status in linux-goldfish source package in Xenial:
New
Status in linux-lts-quantal source package in Xenial:
Invalid
Status in linux-lts-raring source package in Xenial:
Invalid
Status in linux-lts-saucy source package in Xenial:
Invalid
Status in linux-lts-trusty source package in Xenial:
Invalid
Status in linux-lts-utopic source package in Xenial:
Invalid
Status in linux-lts-vivid source package in Xenial:
Invalid
Status in linux-lts-wily source package in Xenial:
Invalid
Status in linux-lts-xenial source package in Xenial:
Invalid
Status in linux-mako source package in Xenial:
New
Status in linux-manta source package in Xenial:
Invalid
Status in linux-raspi2 source package in Xenial:
New
Status in linux-snapdragon source package in Xenial:
New
Status in linux-ti-omap4 source package in Xenial:
Invalid
Status in linux source package in Yakkety:
New
Status in linux-armadaxp source package in Yakkety:
Invalid
Status in linux-flo source package in Yakkety:
New
Status in linux-goldfish source package in Yakkety:
New
Status in linux-lts-quantal source package in Yakkety:
Invalid
Status in linux-lts-raring source package in Yakkety:
Invalid
Status in linux-lts-saucy source package in Yakkety:
Invalid
Status in linux-lts-trusty source package in Yakkety:
Invalid
Status in linux-lts-utopic source package in Yakkety:
Invalid
Status in linux-lts-vivid source package in Yakkety:
Invalid
Status in linux-lts-wily source package in Yakkety:
Invalid
Status in linux-lts-xenial source package in Yakkety:
Invalid
Status in linux-mako source package in Yakkety:
New
Status in linux-manta source package in Yakkety:
Invalid
Status in linux-raspi2 source package in Yakkety:
New
Status in linux-snapdragon source package in Yakkety:
New
Status in linux-ti-omap4 source package in Yakkety:
Invalid
Bug description:
The WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used
in Qualcomm Innovation Center (QuIC) Android contributions for MSM
devices and other products, does not verify authorization for private
SET IOCTL calls, which allows attackers to gain privileges via a
crafted application, related to wlan_hdd_hostapd.c and
wlan_hdd_wext.c.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1580365/+subscriptions
Follow ups