kernel-packages team mailing list archive

[John Johansen <john.johansen@xxxxxxxxxxxxx>]

CVE-2014-4323

** Also affects: linux (Ubuntu Vivid)
   Importance: Undecided
       Status: New

** Also affects: linux-fsl-imx51 (Ubuntu Vivid)
   Importance: Undecided
       Status: New

** Also affects: linux-mvl-dove (Ubuntu Vivid)
   Importance: Undecided
       Status: New

** Also affects: linux-ec2 (Ubuntu Vivid)
   Importance: Undecided
       Status: New

** Also affects: linux-ti-omap4 (Ubuntu Vivid)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-maverick (Ubuntu Vivid)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-natty (Ubuntu Vivid)
   Importance: Undecided
       Status: New

** Also affects: linux (Ubuntu Utopic)
   Importance: Undecided
       Status: New

** Also affects: linux-fsl-imx51 (Ubuntu Utopic)
   Importance: Undecided
       Status: New

** Also affects: linux-mvl-dove (Ubuntu Utopic)
   Importance: Undecided
       Status: New

** Also affects: linux-ec2 (Ubuntu Utopic)
   Importance: Undecided
       Status: New

** Also affects: linux-ti-omap4 (Ubuntu Utopic)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-maverick (Ubuntu Utopic)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-natty (Ubuntu Utopic)
   Importance: Undecided
       Status: New

** Also affects: linux (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux-fsl-imx51 (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux-mvl-dove (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux-ec2 (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux-ti-omap4 (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-maverick (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-natty (Ubuntu Trusty)
   Importance: Undecided
       Status: New

** Also affects: linux (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux-fsl-imx51 (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux-mvl-dove (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux-ec2 (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux-ti-omap4 (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-maverick (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-natty (Ubuntu Precise)
   Importance: Undecided
       Status: New

** Also affects: linux (Ubuntu Lucid)
   Importance: Undecided
       Status: New

** Also affects: linux-fsl-imx51 (Ubuntu Lucid)
   Importance: Undecided
       Status: New

** Also affects: linux-mvl-dove (Ubuntu Lucid)
   Importance: Undecided
       Status: New

** Also affects: linux-ec2 (Ubuntu Lucid)
   Importance: Undecided
       Status: New

** Also affects: linux-ti-omap4 (Ubuntu Lucid)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-maverick (Ubuntu Lucid)
   Importance: Undecided
       Status: New

** Also affects: linux-lts-backport-natty (Ubuntu Lucid)
   Importance: Undecided
       Status: New

** Changed in: linux-lts-trusty (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-lts-trusty (Ubuntu Lucid)
       Status: New => Invalid

** Changed in: linux-lts-trusty (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-lts-trusty (Ubuntu Utopic)
       Status: New => Invalid

** Changed in: linux-armadaxp (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-armadaxp (Ubuntu Lucid)
       Status: New => Invalid

** Changed in: linux-armadaxp (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-armadaxp (Ubuntu Utopic)
       Status: New => Invalid

** Changed in: linux-lts-utopic (Ubuntu Precise)
       Status: New => Invalid

** Changed in: linux-lts-utopic (Ubuntu Lucid)
       Status: New => Invalid

** Changed in: linux-lts-utopic (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-lts-utopic (Ubuntu Utopic)
       Status: New => Invalid

** Changed in: linux-ec2 (Ubuntu Precise)
       Status: New => Invalid

** Changed in: linux-ec2 (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-ec2 (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-ec2 (Ubuntu Utopic)
       Status: New => Invalid

** Changed in: linux-lts-quantal (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-lts-quantal (Ubuntu Lucid)
       Status: New => Invalid

** Changed in: linux-lts-quantal (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-lts-quantal (Ubuntu Utopic)
       Status: New => Invalid

** Changed in: linux-mvl-dove (Ubuntu Precise)
       Status: New => Invalid

** Changed in: linux-mvl-dove (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-mvl-dove (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-mvl-dove (Ubuntu Utopic)
       Status: New => Invalid

** Changed in: linux-lts-saucy (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-lts-saucy (Ubuntu Lucid)
       Status: New => Invalid

** Changed in: linux-lts-saucy (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-lts-saucy (Ubuntu Utopic)
       Status: New => Invalid

** Changed in: linux-ti-omap4 (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-ti-omap4 (Ubuntu Lucid)
       Status: New => Invalid

** Changed in: linux-ti-omap4 (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-ti-omap4 (Ubuntu Utopic)
       Status: New => Invalid

** Changed in: linux-fsl-imx51 (Ubuntu Precise)
       Status: New => Invalid

** Changed in: linux-fsl-imx51 (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-fsl-imx51 (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-fsl-imx51 (Ubuntu Utopic)
       Status: New => Invalid

** Changed in: linux-lts-raring (Ubuntu Trusty)
       Status: New => Invalid

** Changed in: linux-lts-raring (Ubuntu Lucid)
       Status: New => Invalid

** Changed in: linux-lts-raring (Ubuntu Vivid)
       Status: New => Invalid

** Changed in: linux-lts-raring (Ubuntu Utopic)
       Status: New => Invalid

** Description changed:

- Placeholder
+ The mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP
+ display driver for the Linux kernel 3.x, as used in Qualcomm Innovation
+ Center (QuIC) Android contributions for MSM devices and other products,
+ does not validate certain start and length values within an ioctl call,
+ which allows attackers to gain privileges via a crafted application.
+ 
+ Break-Fix: - 014fa8def84c62893fa016e873c12de1da498603

** Changed in: linux-lts-trusty (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-lts-trusty (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-lts-trusty (Ubuntu Lucid)
   Importance: Undecided => High

** Changed in: linux-lts-trusty (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-lts-trusty (Ubuntu Utopic)
   Importance: Undecided => High

** Changed in: linux-armadaxp (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-armadaxp (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-armadaxp (Ubuntu Lucid)
   Importance: Undecided => High

** Changed in: linux-armadaxp (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-armadaxp (Ubuntu Utopic)
   Importance: Undecided => High

** Changed in: linux-lts-utopic (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-lts-utopic (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-lts-utopic (Ubuntu Lucid)
   Importance: Undecided => High

** Changed in: linux-lts-utopic (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-lts-utopic (Ubuntu Utopic)
   Importance: Undecided => High

** Changed in: linux-ec2 (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-ec2 (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-ec2 (Ubuntu Lucid)
   Importance: Undecided => High

** Changed in: linux-ec2 (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-ec2 (Ubuntu Utopic)
   Importance: Undecided => High

** Changed in: linux-lts-quantal (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-lts-quantal (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-lts-quantal (Ubuntu Lucid)
   Importance: Undecided => High

** Changed in: linux-lts-quantal (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-lts-quantal (Ubuntu Utopic)
   Importance: Undecided => High

** Changed in: linux-mvl-dove (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-mvl-dove (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-mvl-dove (Ubuntu Lucid)
       Status: New => Invalid

** Changed in: linux-mvl-dove (Ubuntu Lucid)
   Importance: Undecided => High

** Changed in: linux-mvl-dove (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-mvl-dove (Ubuntu Utopic)
   Importance: Undecided => High

** Changed in: linux-lts-saucy (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-lts-saucy (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-lts-saucy (Ubuntu Lucid)
   Importance: Undecided => High

** Changed in: linux-lts-saucy (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-lts-saucy (Ubuntu Utopic)
   Importance: Undecided => High

** Changed in: linux (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux (Ubuntu Lucid)
   Importance: Undecided => High

** Changed in: linux (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux (Ubuntu Utopic)
   Importance: Undecided => High

** Changed in: linux-ti-omap4 (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-ti-omap4 (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-ti-omap4 (Ubuntu Lucid)
   Importance: Undecided => High

** Changed in: linux-ti-omap4 (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-ti-omap4 (Ubuntu Utopic)
   Importance: Undecided => High

** Changed in: linux-fsl-imx51 (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-fsl-imx51 (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-fsl-imx51 (Ubuntu Lucid)
       Status: New => Invalid

** Changed in: linux-fsl-imx51 (Ubuntu Lucid)
   Importance: Undecided => High

** Changed in: linux-fsl-imx51 (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-fsl-imx51 (Ubuntu Utopic)
   Importance: Undecided => High

** Changed in: linux-lts-raring (Ubuntu Precise)
   Importance: Undecided => High

** Changed in: linux-lts-raring (Ubuntu Trusty)
   Importance: Undecided => High

** Changed in: linux-lts-raring (Ubuntu Lucid)
   Importance: Undecided => High

** Changed in: linux-lts-raring (Ubuntu Vivid)
   Importance: Undecided => High

** Changed in: linux-lts-raring (Ubuntu Utopic)
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Kernel
Packages, which is subscribed to linux in Ubuntu.
https://bugs.launchpad.net/bugs/1403851

Title:
  CVE-2014-4323

Status in linux package in Ubuntu:
  New
Status in linux-armadaxp package in Ubuntu:
  Invalid
Status in linux-ec2 package in Ubuntu:
  Invalid
Status in linux-fsl-imx51 package in Ubuntu:
  Invalid
Status in linux-lts-backport-maverick package in Ubuntu:
  New
Status in linux-lts-backport-natty package in Ubuntu:
  New
Status in linux-lts-quantal package in Ubuntu:
  Invalid
Status in linux-lts-raring package in Ubuntu:
  Invalid
Status in linux-lts-saucy package in Ubuntu:
  Invalid
Status in linux-lts-trusty package in Ubuntu:
  Invalid
Status in linux-lts-utopic package in Ubuntu:
  Invalid
Status in linux-mvl-dove package in Ubuntu:
  Invalid
Status in linux-ti-omap4 package in Ubuntu:
  Invalid
Status in linux source package in Lucid:
  New
Status in linux-armadaxp source package in Lucid:
  Invalid
Status in linux-ec2 source package in Lucid:
  New
Status in linux-fsl-imx51 source package in Lucid:
  Invalid
Status in linux-lts-backport-maverick source package in Lucid:
  New
Status in linux-lts-backport-natty source package in Lucid:
  New
Status in linux-lts-quantal source package in Lucid:
  Invalid
Status in linux-lts-raring source package in Lucid:
  Invalid
Status in linux-lts-saucy source package in Lucid:
  Invalid
Status in linux-lts-trusty source package in Lucid:
  Invalid
Status in linux-lts-utopic source package in Lucid:
  Invalid
Status in linux-mvl-dove source package in Lucid:
  Invalid
Status in linux-ti-omap4 source package in Lucid:
  Invalid
Status in linux source package in Precise:
  New
Status in linux-armadaxp source package in Precise:
  New
Status in linux-ec2 source package in Precise:
  Invalid
Status in linux-fsl-imx51 source package in Precise:
  Invalid
Status in linux-lts-backport-maverick source package in Precise:
  New
Status in linux-lts-backport-natty source package in Precise:
  New
Status in linux-lts-quantal source package in Precise:
  New
Status in linux-lts-raring source package in Precise:
  New
Status in linux-lts-saucy source package in Precise:
  New
Status in linux-lts-trusty source package in Precise:
  New
Status in linux-lts-utopic source package in Precise:
  Invalid
Status in linux-mvl-dove source package in Precise:
  Invalid
Status in linux-ti-omap4 source package in Precise:
  New
Status in linux source package in Trusty:
  New
Status in linux-armadaxp source package in Trusty:
  Invalid
Status in linux-ec2 source package in Trusty:
  Invalid
Status in linux-fsl-imx51 source package in Trusty:
  Invalid
Status in linux-lts-backport-maverick source package in Trusty:
  New
Status in linux-lts-backport-natty source package in Trusty:
  New
Status in linux-lts-quantal source package in Trusty:
  Invalid
Status in linux-lts-raring source package in Trusty:
  Invalid
Status in linux-lts-saucy source package in Trusty:
  Invalid
Status in linux-lts-trusty source package in Trusty:
  Invalid
Status in linux-lts-utopic source package in Trusty:
  New
Status in linux-mvl-dove source package in Trusty:
  Invalid
Status in linux-ti-omap4 source package in Trusty:
  Invalid
Status in linux source package in Utopic:
  New
Status in linux-armadaxp source package in Utopic:
  Invalid
Status in linux-ec2 source package in Utopic:
  Invalid
Status in linux-fsl-imx51 source package in Utopic:
  Invalid
Status in linux-lts-backport-maverick source package in Utopic:
  New
Status in linux-lts-backport-natty source package in Utopic:
  New
Status in linux-lts-quantal source package in Utopic:
  Invalid
Status in linux-lts-raring source package in Utopic:
  Invalid
Status in linux-lts-saucy source package in Utopic:
  Invalid
Status in linux-lts-trusty source package in Utopic:
  Invalid
Status in linux-lts-utopic source package in Utopic:
  Invalid
Status in linux-mvl-dove source package in Utopic:
  Invalid
Status in linux-ti-omap4 source package in Utopic:
  Invalid
Status in linux source package in Vivid:
  New
Status in linux-armadaxp source package in Vivid:
  Invalid
Status in linux-ec2 source package in Vivid:
  Invalid
Status in linux-fsl-imx51 source package in Vivid:
  Invalid
Status in linux-lts-backport-maverick source package in Vivid:
  New
Status in linux-lts-backport-natty source package in Vivid:
  New
Status in linux-lts-quantal source package in Vivid:
  Invalid
Status in linux-lts-raring source package in Vivid:
  Invalid
Status in linux-lts-saucy source package in Vivid:
  Invalid
Status in linux-lts-trusty source package in Vivid:
  Invalid
Status in linux-lts-utopic source package in Vivid:
  Invalid
Status in linux-mvl-dove source package in Vivid:
  Invalid
Status in linux-ti-omap4 source package in Vivid:
  Invalid

Bug description:
  The mdp_lut_hw_update function in drivers/video/msm/mdp.c in the MDP
  display driver for the Linux kernel 3.x, as used in Qualcomm
  Innovation Center (QuIC) Android contributions for MSM devices and
  other products, does not validate certain start and length values
  within an ioctl call, which allows attackers to gain privileges via a
  crafted application.

  Break-Fix: - 014fa8def84c62893fa016e873c12de1da498603

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1403851/+subscriptions