Your submission was sent successfully! Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2015-2877

Published: 3 March 2017

** DISPUTED ** Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection (CAIN) attack. NOTE: the vendor states "Basically if you care about this attack vector, disable deduplication." Share-until-written approaches for memory conservation among mutually untrusting tenants are inherently detectable for information disclosure, and can be classified as potentially misunderstood behaviors rather than vulnerabilities.

Notes

AuthorNote
tyhicks
The behavior represented by CVE-2015-2877 is inherent to Kernel
Samepage Merging. To mitigate the issue, follow the steps above to disable
KSM.

Mitigation

If qemu-kvm is installed, set KSM_ENABLED=0 in /etc/default/qemu-kvm,
otherwise will need to
  echo -n 0 > /sys/kernel/mm/ksm/run

Priority

Low

Cvss 3 Severity Score

3.3

Score breakdown

Status

Package Release Status
linux-flo
Launchpad, Ubuntu, Debian
bionic Does not exist

artful Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist
(trusty was ignored)
upstream Needs triage

utopic Ignored
(end of life, was needs-triage)
vivid Ignored
(end of life)
wily Ignored
(end of life)
xenial Ignored
(abandoned)
yakkety Ignored
(end of life)
zesty Does not exist

linux
Launchpad, Ubuntu, Debian
artful Ignored
(end of life)
bionic Ignored
(architectural limitation of KSM)
cosmic Ignored
(end of life)
trusty Ignored
(architectural limitation of KSM)
upstream Needed

utopic Ignored
(end of life, was deferred)
vivid Ignored
(end of life, was deferred)
wily Ignored
(end of life)
xenial Ignored
(architectural limitation of KSM)
yakkety Ignored
(end of life)
zesty Ignored
(end of life)
precise Ignored
(end of life)
linux-armadaxp
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

precise Ignored
(end of life)
This package is not directly supported by the Ubuntu Security Team
linux-aws
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Ignored
(architectural limitation of KSM)
cosmic Ignored
(end of life)
precise Does not exist

trusty Ignored
(architectural limitation of KSM)
upstream Needs triage

xenial Ignored
(architectural limitation of KSM)
yakkety Does not exist

zesty Does not exist

linux-azure
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Ignored
(architectural limitation of KSM)
cosmic Ignored
(end of life)
trusty Ignored
(architectural limitation of KSM)
upstream Needs triage

xenial Ignored
(architectural limitation of KSM)
yakkety Does not exist

zesty Does not exist

linux-azure-edge
Launchpad, Ubuntu, Debian
bionic Ignored
(architectural limitation of KSM)
cosmic Does not exist

trusty Does not exist

upstream Needs triage

xenial Ignored
(end of standard support)
linux-ec2
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-euclid
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

trusty Does not exist

upstream Needs triage

xenial Ignored
(architectural limitation of KSM)
zesty Does not exist

linux-fsl-imx51
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-gcp
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Ignored
(architectural limitation of KSM)
cosmic Ignored
(end of life)
trusty Does not exist

upstream Needs triage

xenial Ignored
(architectural limitation of KSM)
yakkety Does not exist

zesty Does not exist

linux-gke
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist

upstream Needs triage

xenial Ignored
(end of life, was needed)
yakkety Does not exist

zesty Does not exist

linux-goldfish
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist
(trusty was ignored)
upstream Needs triage

utopic Ignored
(end of life)
vivid Ignored
(end of life)
wily Ignored
(end of life)
xenial Ignored
(abandoned)
yakkety Ignored
(end of life)
zesty Ignored
(end of life)
linux-grouper
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist
(trusty was ignored)
upstream Needs triage

utopic Ignored
(end of life)
vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-hwe
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Ignored
(architectural limitation of KSM)
cosmic Does not exist

precise Does not exist

trusty Does not exist

upstream Needs triage

xenial Ignored
(architectural limitation of KSM)
yakkety Does not exist

zesty Does not exist

linux-hwe-edge
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Ignored
(architectural limitation of KSM)
cosmic Does not exist

precise Does not exist

trusty Does not exist

upstream Needs triage

xenial Ignored
(architectural limitation of KSM)
yakkety Does not exist

zesty Does not exist

linux-kvm
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Ignored
(architectural limitation of KSM)
cosmic Ignored
(end of life)
trusty Does not exist

upstream Needs triage

xenial Ignored
(architectural limitation of KSM)
zesty Does not exist

linux-linaro-omap
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

precise Ignored
(end of life)
linux-linaro-shared
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

precise Ignored
(end of life)
linux-linaro-vexpress
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

precise Ignored
(end of life)
linux-lts-quantal
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

precise Ignored
(end of life)
This package is not directly supported by the Ubuntu Security Team
linux-lts-raring
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

precise Ignored
(end of life, was needs-triage)
linux-lts-saucy
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

precise Ignored
(end of life)
This package is not directly supported by the Ubuntu Security Team
linux-lts-trusty
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

precise Ignored
(end of life)
linux-lts-utopic
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Ignored
(end of life, was ignored)
upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-lts-vivid
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Ignored
(end of life, was ignored)
upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-lts-wily
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Ignored
(end of life, was ignored)
upstream Needs triage

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-lts-xenial
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Ignored
(architectural limitation of KSM)
upstream Needs triage

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-maguro
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist
(trusty was ignored)
upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-mako
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist
(trusty was ignored)
upstream Needs triage

utopic Ignored
(end of life, was needs-triage)
vivid Ignored
(end of life)
wily Ignored
(end of life)
xenial Ignored
(abandoned)
yakkety Ignored
(end of life)
zesty Does not exist

linux-manta
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist
(trusty was ignored)
upstream Needs triage

utopic Ignored
(end of life, was needs-triage)
vivid Ignored
(end of life)
wily Ignored
(end of life)
xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-mvl-dove
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-oem
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Ignored
(architectural limitation of KSM)
cosmic Ignored
(end of life)
trusty Does not exist

upstream Needs triage

xenial Ignored
(end of life)
zesty Does not exist

linux-qcm-msm
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

precise Ignored
(end of life)
linux-raspi2
Launchpad, Ubuntu, Debian
artful Ignored
(end of life)
bionic Ignored
(end of standard support)
cosmic Ignored
(end of life)
precise Does not exist

trusty Does not exist

upstream Needs triage

vivid Does not exist

wily Ignored
(end of life)
xenial Ignored
(architectural limitation of KSM)
yakkety Ignored
(end of life)
zesty Ignored
(end of life)
linux-snapdragon
Launchpad, Ubuntu, Debian
artful Ignored
(end of life)
bionic Ignored
(end of standard support)
cosmic Does not exist

precise Does not exist

trusty Does not exist

upstream Needs triage

wily Does not exist

xenial Ignored
(architectural limitation of KSM)
yakkety Ignored
(end of life)
zesty Ignored
(end of life)
linux-ti-omap4
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

precise Ignored
(end of life)

Severity score breakdown

Parameter Value
Base score 3.3
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Scope Unchanged
Confidentiality Low
Integrity impact None
Availability impact None
Vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N