CVE-2014-0131

2014-03-2400:00:00

ubuntu.com

2.9 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:M/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

49.0%

JSON

Use-after-free vulnerability in the skb_segment function in
net/core/skbuff.c in the Linux kernel through 3.13.6 allows attackers to
obtain sensitive information from kernel memory by leveraging the absence
of a certain orphaning operation.

Bugs

<https://launchpad.net/bugs/1298119>

Notes

Author	Note
jdstrand	android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels
apw	Also needs the following: a5c39b046fdf5025ab4d274edaf5d8f53326b34c skbuff: skb_segment: s/fskb/list_skb/ cff87de1c2625eadcd1b38f14d3a036e160aefa3 skbuff: skb_segment: s/skb/head_skb/ ef92873b71a1879a19d64575725a7bbf8c59d9f6 skbuff: skb_segment: s/skb_frag/frag/ c4d421e6e53be12b422b5d6ff93bf6c1d6cc83d5 skbuff: skb_segment: s/frag/nskb_frag/

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchlinux< 3.2.0-67.101UNKNOWN
ubuntu13.10noarchlinux< 3.11.0-26.45UNKNOWN
ubuntu12.04noarchlinux-armadaxp< 3.2.0-1636.53UNKNOWN
ubuntu12.04noarchlinux-lts-quantal< 3.5.0-54.81~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-raring< 3.8.0-44.66~precise1UNKNOWN
ubuntu12.04noarchlinux-lts-saucy< 3.11.0-26.45~precise1UNKNOWN
ubuntu12.04noarchlinux-ti-omap4< 3.2.0-1451.71UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	12.04	noarch	linux	< 3.2.0-67.101	UNKNOWN
ubuntu	13.10	noarch	linux	< 3.11.0-26.45	UNKNOWN
ubuntu	12.04	noarch	linux-armadaxp	< 3.2.0-1636.53	UNKNOWN
ubuntu	12.04	noarch	linux-lts-quantal	< 3.5.0-54.81~precise1	UNKNOWN
ubuntu	12.04	noarch	linux-lts-raring	< 3.8.0-44.66~precise1	UNKNOWN
ubuntu	12.04	noarch	linux-lts-saucy	< 3.11.0-26.45~precise1	UNKNOWN
ubuntu	12.04	noarch	linux-ti-omap4	< 3.2.0-1451.71	UNKNOWN