Your submission was sent successfully! Close

You have successfully unsubscribed! Close

CVE-2015-2877

Published: 3 March 2017

** DISPUTED ** Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel, which allows guest OS users to defeat the ASLR protection mechanism on other guest OS instances via a Cross-VM ASL INtrospection (CAIN) attack. NOTE: the vendor states "Basically if you care about this attack vector, disable deduplication." Share-until-written approaches for memory conservation among mutually untrusting tenants are inherently detectable for information disclosure, and can be classified as potentially misunderstood behaviors rather than vulnerabilities.

Notes

AuthorNote
tyhicks
The behavior represented by CVE-2015-2877 is inherent to Kernel
Samepage Merging. To mitigate the issue, follow the steps above to disable
KSM.

Mitigation

If qemu-kvm is installed, set KSM_ENABLED=0 in /etc/default/qemu-kvm,
otherwise will need to
  echo -n 0 > /sys/kernel/mm/ksm/run
Priority

Low

CVSS 3 base score: 3.3

Status

Package Release Status
linux
Launchpad, Ubuntu, Debian
artful Ignored
(reached end-of-life)
bionic Ignored
(architectural limitation of KSM)
cosmic Ignored
(architectural limitation of KSM)
precise Ignored
(architectural limitation of KSM)
trusty Ignored
(architectural limitation of KSM)
upstream Needed

utopic Ignored
(was deferred [2018-10-01] now end-of-life)
vivid Ignored
(was deferred [2018-10-01] now end-of-life)
wily Ignored
(reached end-of-life)
xenial Ignored
(architectural limitation of KSM)
yakkety Ignored
(reached end-of-life)
zesty Ignored
(reached end-of-life)
linux-armadaxp
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist
(precise was deferred)
trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

This package is not directly supported by the Ubuntu Security Team
linux-aws
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Ignored
(architectural limitation of KSM)
cosmic Ignored
(architectural limitation of KSM)
precise Does not exist

trusty Ignored
(architectural limitation of KSM)
upstream Needs triage

xenial Ignored
(architectural limitation of KSM)
yakkety Does not exist

zesty Does not exist

linux-azure
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Ignored
(architectural limitation of KSM)
cosmic Ignored
(architectural limitation of KSM)
precise Does not exist

trusty Ignored
(architectural limitation of KSM)
upstream Needs triage

xenial Ignored
(architectural limitation of KSM)
yakkety Does not exist

zesty Does not exist

linux-azure-edge
Launchpad, Ubuntu, Debian
bionic Ignored
(architectural limitation of KSM)
cosmic Does not exist

precise Does not exist

trusty Does not exist

upstream Needs triage

xenial Ignored
(architectural limitation of KSM)
linux-ec2
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-euclid
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist

upstream Needs triage

xenial Ignored
(architectural limitation of KSM)
zesty Does not exist

linux-flo
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist
(trusty was ignored)
upstream Needs triage

utopic Ignored
(was needs-triage now end-of-life)
vivid Ignored
(reached end-of-life)
wily Ignored
(reached end-of-life)
xenial Ignored
(abandoned)
yakkety Ignored
(abandoned)
zesty Does not exist

linux-fsl-imx51
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-gcp
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Ignored
(architectural limitation of KSM)
cosmic Ignored
(architectural limitation of KSM)
precise Does not exist

trusty Does not exist

upstream Needs triage

xenial Ignored
(architectural limitation of KSM)
yakkety Does not exist

zesty Does not exist

linux-gke
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist

upstream Needs triage

xenial Ignored
(was needed now end-of-life)
yakkety Does not exist

zesty Does not exist

linux-goldfish
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist
(trusty was ignored)
upstream Needs triage

utopic Ignored
(abandoned)
vivid Ignored
(reached end-of-life)
wily Ignored
(reached end-of-life)
xenial Ignored
(abandoned)
yakkety Ignored
(abandoned)
zesty Ignored
(abandoned)
linux-grouper
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist
(trusty was ignored)
upstream Needs triage

utopic Ignored
(reached end-of-life)
vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-hwe
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Ignored
(architectural limitation of KSM)
cosmic Does not exist

precise Does not exist

trusty Does not exist

upstream Needs triage

xenial Ignored
(architectural limitation of KSM)
yakkety Does not exist

zesty Does not exist

linux-hwe-edge
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Ignored
(architectural limitation of KSM)
cosmic Does not exist

precise Does not exist

trusty Does not exist

upstream Needs triage

xenial Ignored
(architectural limitation of KSM)
yakkety Does not exist

zesty Does not exist

linux-kvm
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Ignored
(architectural limitation of KSM)
cosmic Ignored
(architectural limitation of KSM)
precise Does not exist

trusty Does not exist

upstream Needs triage

xenial Ignored
(architectural limitation of KSM)
zesty Does not exist

linux-linaro-omap
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist
(precise was ignored [abandoned])
trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-linaro-shared
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist
(precise was ignored [abandoned])
trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-linaro-vexpress
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist
(precise was ignored [abandoned])
trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-lts-quantal
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist
(precise was ignored [end-of-life])
trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

This package is not directly supported by the Ubuntu Security Team
linux-lts-raring
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist
(precise was ignored [was needs-triage now end-of-life])
trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-lts-saucy
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist
(precise was ignored [end-of-life])
trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

This package is not directly supported by the Ubuntu Security Team
linux-lts-trusty
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Ignored
(architectural limitation of KSM)
trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-lts-utopic
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist
(trusty was ignored [end-of-life])
upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-lts-vivid
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist
(trusty was ignored [end-of-life])
upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-lts-wily
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist
(trusty was ignored [end-of-life])
upstream Needs triage

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-lts-xenial
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Ignored
(architectural limitation of KSM)
upstream Needs triage

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-maguro
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist
(trusty was ignored)
upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-mako
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist
(trusty was ignored)
upstream Needs triage

utopic Ignored
(was needs-triage now end-of-life)
vivid Ignored
(reached end-of-life)
wily Ignored
(reached end-of-life)
xenial Ignored
(abandoned)
yakkety Ignored
(abandoned)
zesty Does not exist

linux-manta
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist
(trusty was ignored)
upstream Needs triage

utopic Ignored
(was needs-triage now end-of-life)
vivid Ignored
(reached end-of-life)
wily Ignored
(reached end-of-life)
xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-mvl-dove
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist

trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-oem
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Ignored
(architectural limitation of KSM)
cosmic Ignored
(architectural limitation of KSM)
precise Does not exist

trusty Does not exist

upstream Needs triage

xenial Ignored
(end-of-life)
zesty Does not exist

linux-qcm-msm
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist
(precise was ignored [abandoned])
trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist

linux-raspi2
Launchpad, Ubuntu, Debian
artful Ignored
(reached end-of-life)
bionic Ignored
(architectural limitation of KSM)
cosmic Ignored
(architectural limitation of KSM)
precise Does not exist

trusty Does not exist

upstream Needs triage

vivid Does not exist

wily Ignored
(reached end-of-life)
xenial Ignored
(architectural limitation of KSM)
yakkety Ignored
(reached end-of-life)
zesty Ignored
(reached end-of-life)
linux-snapdragon
Launchpad, Ubuntu, Debian
artful Ignored
(reached end-of-life)
bionic Ignored
(architectural limitation of KSM)
cosmic Does not exist

precise Does not exist

trusty Does not exist

upstream Needs triage

wily Does not exist

xenial Ignored
(architectural limitation of KSM)
yakkety Ignored
(reached end-of-life)
zesty Ignored
(reached end-of-life)
linux-ti-omap4
Launchpad, Ubuntu, Debian
artful Does not exist

bionic Does not exist

cosmic Does not exist

precise Does not exist
(precise was deferred)
trusty Does not exist

upstream Needs triage

utopic Does not exist

vivid Does not exist

wily Does not exist

xenial Does not exist

yakkety Does not exist

zesty Does not exist