--- title: "CVE-2014-7284\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2014-7284?format=md keywords: index, follow --- # CVE-2014-7284 Publication date 13 October 2014 Last updated 4 July 2026 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description The net\_get\_random\_once implementation in net/core/utils.c in the Linux kernel 3.13.x and 3.14.x before 3.14.5 on certain Intel processors does not perform the intended slow-path operation to initialize random seeds, which makes it easier for remote attackers to spoof or disrupt IP communication by leveraging the predictability of TCP sequence numbers, TCP and UDP port numbers, and IP ID values. ### From the Ubuntu Security Team Tuomas Räsänen reported the Linux kernel on certain Intel processors does not properly initialize random seeds for network operations, causing TCP sequence numbers, TCP and UDP port numbers and IP ID values to be predictable. A remote attacker could exploit this flaw to spoof or disrupt IP communication. [Read the notes from the security team](https://ubuntu.com/security/CVE-2014-7284?format=md#notes) ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | linux-goldfish | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-grouper | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Ignored end of life | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-maguro | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-mako | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-manta | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-flo | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-lts-utopic | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux-lts-vivid | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not in release | | linux | 15.10 wily | Not affected | | 15.04 vivid | Not affected | | 14.10 utopic | Not affected | | 14.04 LTS trusty | Fixed 3.13.0-32.57 | | 12.04 LTS precise | Not affected | | 10.04 LTS lucid | Not affected | | linux-armadaxp | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not affected | | 10.04 LTS lucid | Not in release | | linux-ec2 | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Not affected | | linux-fsl-imx51 | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Ignored end of life | | linux-linaro-omap | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Not in release | | linux-linaro-shared | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Not in release | | linux-linaro-vexpress | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Not in release | | linux-lts-quantal | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not affected | | 10.04 LTS lucid | Not in release | | linux-lts-raring | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Ignored end of life, was needs-triage | | 10.04 LTS lucid | Not in release | | linux-lts-saucy | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not affected | | 10.04 LTS lucid | Not in release | | linux-lts-trusty | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Fixed 3.13.0-32.57~precise1 | | 10.04 LTS lucid | Not in release | | linux-mvl-dove | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | 10.04 LTS lucid | Ignored end of life | | linux-qcm-msm | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Ignored end of life | | 10.04 LTS lucid | Ignored end of life | | linux-raspi2 | 15.10 wily | Not affected | | 15.04 vivid | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not in release | | linux-ti-omap4 | 15.10 wily | Not in release | | 15.04 vivid | Not in release | | 14.10 utopic | Not in release | | 14.04 LTS trusty | Not in release | | 12.04 LTS precise | Not affected | | 10.04 LTS lucid | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) * [Patch details](https://ubuntu.com/security/CVE-2014-7284?format=md#patch-details) ## Notes --- ### [jdstrand](https://launchpad.net/~jdstrand) android kernels (flo, goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 14.04 preview kernels linux-lts-saucy no longer receives official support linux-lts-quantal no longer receives official support per apw, this was fixed in passing in 3.13.0-39.66~precise1, part of https://ubuntu.com/security/notices/USN-2394-1, but not documented in the changelog or the USN. ### Patch details For informational purposes only. We recommend not to cherry-pick updates. [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) | Package | Patch details | | --- | --- | | linux | * Introduced by [a48e429](https://git.kernel.org/linus/a48e42920ff38bc90bbf75143fff4555723d4540), fixed by [3d44052](https://git.kernel.org/linus/3d4405226d27b3a215e4d03cfa51f536244e5de7) | ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-7284) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2014-7284) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2014-7284) * [Debian](https://security-tracker.debian.org/tracker/CVE-2014-7284) ### Related Ubuntu Security Notices (USN) + [USN-2288-1](https://usn.ubuntu.com/USN-2288-1) + Linux kernel (Trusty HWE) vulnerabilities + 17 July 2014 + [USN-2290-1](https://usn.ubuntu.com/USN-2290-1) + Linux kernel vulnerabilities + 17 July 2014 ### Other references * *