CVE-2014-8159

Published: 31 December 2014

The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly restrict use of User Verbs for registration of memory regions, which allows local users to access arbitrary physical memory locations, and consequently cause a denial of service (system crash) or gain privileges, by leveraging permissions on a uverbs device under /dev/infiniband/.

From the Ubuntu Security Team

It was discovered that the Linux kernel's Infiniband subsystem did not properly sanitize its input parameters while registering memory regions from userspace. A local user could exploit this flaw to cause a denial of service (system crash) or to potentially gain administrative privileges.

Notes

android kernels (flo, goldfish, grouper, maguro, mako and manta) are
not supported on the Ubuntu Touch 14.10 and earlier preview kernels
linux-lts-saucy no longer receives official support
linux-lts-quantal no longer receives official support

was recorded as CVE-2015-8159 in git commits

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8159
• https://ubuntu.com/security/notices/USN-2525-1
• https://ubuntu.com/security/notices/USN-2526-1
• https://ubuntu.com/security/notices/USN-2527-1
• https://ubuntu.com/security/notices/USN-2528-1
• https://ubuntu.com/security/notices/USN-2529-1
• https://ubuntu.com/security/notices/USN-2530-1
• https://ubuntu.com/security/notices/USN-2561-1
• NVD
• Launchpad
• Debian

Bugs

• https://launchpad.net/bugs/1413741