Skip to content
OpenAdvisories
Unscored USN-2664-1 7 CVEs

linux-lts-utopic vulnerabilities

Published Jul 7, 2015 · Updated Feb 10, 2026

Summary

A race condition was discovered in the Linux kernel's file_handle size
verification. A local user could exploit this flaw to read potentially
sensative memory locations. (CVE-2015-1420)

A underflow error was discovered in the Linux kernel's Ozmo Devices USB
over WiFi host controller driver. A remote attacker could exploit this flaw
to cause a denial of service (system crash) or potentially execute
arbitrary code via a specially crafted packet. (CVE-2015-4001)

A bounds check error was discovered in the Linux kernel's Ozmo Devices USB
over WiFi host controller driver. A remote attacker could exploit this flaw
to cause a denial of service (system crash) or potentially execute
arbitrary code via a specially crafted packet. (CVE-2015-4002)

A division by zero error was discovered in the Linux kernel's Ozmo Devices
USB over WiFi host controller driver. A remote attacker could exploit this
flaw to cause a denial of service (system crash). (CVE-2015-4003)

Carl H Lunde discovered missing consistency checks in the Linux kernel's UDF
file system (CONFIG_UDF_FS). A local attacker could exploit this flaw to cause
a denial of service (system crash) by using a corrupted file system image.
(CVE-2015-4167)

Daniel Borkmann reported a kernel crash in the Linux kernel's BPF filter
JIT optimization. A local attacker could exploit this flaw to cause a
denial of service (system crash). (CVE-2015-4700)

A double free flaw was discovered in the Linux kernel's path lookup. A
local user could cause a denial of service (Oops). (CVE-2015-5706)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS linux-lts-utopic 3.16.0-43.58~14.04.1

Vulnerabilities 7

References

  • report
    https://ubuntu.com/security/CVE-2015-1420
  • report
    https://ubuntu.com/security/CVE-2015-4001
  • report
    https://ubuntu.com/security/CVE-2015-4002
  • report
    https://ubuntu.com/security/CVE-2015-4003
  • report
    https://ubuntu.com/security/CVE-2015-4167
  • report
    https://ubuntu.com/security/CVE-2015-4700
  • report
    https://ubuntu.com/security/CVE-2015-5706