--- title: "CVE-2014-4699\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2014-4699?format=md keywords: index, follow --- # CVE-2014-4699 Publication date 4 July 2014 Last updated 4 July 2026 --- Ubuntu priority **High** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to leverage a race condition and gain privileges, or cause a denial of service (double fault), via a crafted application that makes ptrace and fork system calls. ### From the Ubuntu Security Team Andy Lutomirski discovered a flaw with the Linux kernel's ptrace syscall on x86\_64 processors. An attacker could exploit this flaw to cause a denial of service (System Crash) or potential gain administrative privileges. [Read the notes from the security team](https://ubuntu.com/security/CVE-2014-4699?format=md#notes) ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | linux-goldfish | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Ignored | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-grouper | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Ignored end of life | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Ignored | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-maguro | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Ignored | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-mako | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Ignored | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-manta | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Ignored | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-flo | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-lts-utopic | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-lts-vivid | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Fixed 3.13.0-30.55 | | 13.10 saucy | Fixed 3.11.0-24.42 | | 12.04 LTS precise | Fixed 3.2.0-65.99 | | 10.04 LTS lucid | Fixed 2.6.32-62.126 | | linux-armadaxp | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Fixed 3.2.0-1636.53 | | 10.04 LTS lucid | Not in release | | linux-ec2 | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Fixed 2.6.32-366.81 | | linux-fsl-imx51 | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Ignored end of life | | linux-linaro-omap | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Not in release | | linux-linaro-shared | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Not in release | | linux-linaro-vexpress | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Not in release | | linux-lts-quantal | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Fixed 3.5.0-52.79~precise1 | | 10.04 LTS lucid | Not in release | | linux-lts-raring | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Fixed 3.8.0-42.63~precise1 | | 10.04 LTS lucid | Not in release | | linux-lts-saucy | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Fixed 3.11.0-24.42~precise1 | | 10.04 LTS lucid | Not in release | | linux-lts-trusty | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Fixed 3.13.0-30.55~precise1 | | 10.04 LTS lucid | Not in release | | linux-mvl-dove | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Ignored end of life | | linux-qcm-msm | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Not in release | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Ignored end of life | | linux-raspi2 | 15.10 wily | Not affected | | 15.04 vivid | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | linux-ti-omap4 | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 13.10 saucy | Ignored end of life | | 12.04 LTS precise | Fixed 3.2.0-1451.71 | | 10.04 LTS lucid | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) * [Patch details](https://ubuntu.com/security/CVE-2014-4699?format=md#patch-details) ## Notes --- ### [jdstrand](https://launchpad.net/~jdstrand) android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels --- ### [jj](https://launchpad.net/~jj) begin sha1 is not actual commit that broke it just first kernel (2.6.17) as reported by Andy Lutomirski x86\_64 only. Likely intel only ### Patch details For informational purposes only. We recommend not to cherry-pick updates. [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) | Package | Patch details | | --- | --- | | linux | * Introduced by [427abfa](https://git.kernel.org/linus/427abfa28afedffadfca9dd8b067eb6d36bac53f), fixed by [b9cd18d](https://git.kernel.org/linus/b9cd18de4db3c9ffa7e17b0dc0ca99ed5aa4d43a) | ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-4699) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2014-4699) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2014-4699) * [Debian](https://security-tracker.debian.org/tracker/CVE-2014-4699) ### Related Ubuntu Security Notices (USN) + [USN-2270-1](https://usn.ubuntu.com/USN-2270-1) + Linux kernel (Raring HWE) vulnerability + 5 July 2014 + [USN-2274-1](https://usn.ubuntu.com/USN-2274-1) + Linux kernel vulnerability + 5 July 2014 + [USN-2266-1](https://usn.ubuntu.com/USN-2266-1) + Linux kernel vulnerability + 5 July 2014 + [USN-2269-1](https://usn.ubuntu.com/USN-2269-1) + Linux kernel (Quantal HWE) vulnerability + 5 July 2014 + [USN-2271-1](https://usn.ubuntu.com/USN-2271-1) + Linux kernel (Saucy HWE) vulnerability + 5 July 2014 + [USN-2272-1](https://usn.ubuntu.com/USN-2272-1) + Linux kernel (Trusty HWE) vulnerability + 5 July 2014 + [USN-2267-1](https://usn.ubuntu.com/USN-2267-1) + Linux kernel (EC2) vulnerability + 5 July 2014 + [USN-2273-1](https://usn.ubuntu.com/USN-2273-1) + Linux kernel vulnerability + 5 July 2014 + [USN-2268-1](https://usn.ubuntu.com/USN-2268-1) + Linux kernel vulnerability + 5 July 2014 + [USN-2284-1](https://usn.ubuntu.com/USN-2284-1) + Linux kernel (OMAP4) vulnerabilities + 16 July 2014 ### Other references *