Linux Kernel - Security Update (DSA-2992-1)
Summary
DSA-2992-1: linux - security update. Affects linux versions < 3.2.60-1+deb7u3. Fixed in 3.2.60-1+deb7u3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The Linux kernel is the core component of the Linux operating system. It provides essential functionality and interfaces for various hardware devices and software components. The kernel is responsible for managing system resources, executing processes, and ensuring security and stability. The Linux kernel is widely used in various distributions and is constantly being updated to address vulnerabilities and improve performance.
Vulnerability Detail
The DSA-2992-1 security update addresses several vulnerabilities in the Linux kernel. These vulnerabilities could lead to a denial of service or privilege escalation. The specific vulnerabilities are as follows:
-
CVE-2014-3534: This vulnerability allows an unprivileged local user on s390 systems to gain read/write access to kernel memory by manipulating the psw mask value in the ptrace subsystem.
-
CVE-2014-4667: A flaw in the sctp_association_free function allows remote attackers to cause a denial of service (socket outage) by sending a crafted SCTP packet.
-
CVE-2014-4943: An unprivileged local user can exploit a flaw in the Linux kernel's point-to-point protocol (PPP) when used with the Layer Two Tunneling Protocol (L2TP) to escalate privileges.
How To Fix
Minimum fixed version
3.2.60-1+deb7u3
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There are no specific workarounds mentioned for these vulnerabilities.
Conclusion
The DSA-2992-1 security update addresses several vulnerabilities in the Linux kernel that could lead to a denial of service or privilege escalation. It is recommended to upgrade the Linux kernel to the patched versions as soon as possible to mitigate the risk. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
These vulnerabilities could allow an attacker to gain unauthorized access to kernel memory or cause a denial of service, potentially leading to system instability or unauthorized access to sensitive information.
Users of Linux systems running the affected versions of the Linux kernel are potentially affected by these vulnerabilities.
There are no known exploits for these vulnerabilities at the time of this advisory. However, it is important to apply the security updates as soon as possible to mitigate the risk.
The CVE-2014-4667 vulnerability can be exploited remotely by sending a crafted SCTP packet. The other vulnerabilities require local access to the system.
For more information, refer to the CVE identifiers mentioned in the vulnerability details section.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
