--- title: 'USN-2175-1: Linux kernel (Quantal HWE) vulnerabilities | Ubuntu security notices' description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices/USN-2175-1 --- 1. [Ubuntu Security Notices](https://ubuntu.com/security/notices) 2. USN-2175-1 --- # USN-2175-1: Linux kernel (Quantal HWE) vulnerabilities Publication date 26 April 2014 Overview Several security issues were fixed in the kernel. Releases [12.04](https://ubuntu.com/security/notices?release=precise) --- Open side navigation ## Packages * [linux-lts-quantal](https://ubuntu.com/security/cves?package=linux-lts-quantal) - Linux hardware enablement kernel from Quantal ## Details A flaw was discovered in the Kernel Virtual Machine (KVM) subsystem of the Linux kernel. A guest OS user could exploit this flaw to execute arbitrary code on the host OS. ([CVE-2014-0049](https://ubuntu.com/security/CVE-2014-0049)) Al Viro discovered an error in how CIFS in the Linux kernel handles uncached write operations. An unprivileged local user could exploit this flaw to cause a denial of service (system crash), obtain sensitive information from kernel memory, or possibly gain privileges. ([CVE-2014-0069](https://ubuntu.com/security/CVE-2014-0069)) Jouni Malinen reported a flaw in the handling of fragmentation in the mac8Linux subsystem of the kernel. A remote attacker could exploit this flaw to obtain potential sensitive cleartext information by reading packets. ([CVE-2014-8709](https://ubuntu.com/security/CVE-2014-8709)) ## Update instructions After a standard system update you need to reboot your computer to make all the necessary changes. [Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security) ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. If you use linux-restricted-modules, you have to update that package as well to get modules which work with the new kernel version. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-server, linux-powerpc), a standard system upgrade will automatically perform this as well. The problem can be corrected by updating your system to the following package versions: | Ubuntu Release | Package Version | | --- | --- | | 12.04 precise | [linux-image-3.5.0-49-generic](https://launchpad.net/ubuntu/+source/linux-lts-quantal) –  [3.5.0-49.73~precise1](https://launchpad.net/ubuntu/+source/linux-lts-quantal/3.5.0-49.73~precise1) | | | --- ### Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. [Get Ubuntu Pro](https://ubuntu.com/pro) ## References * [CVE-2014-8709](https://ubuntu.com/security/CVE-2014-8709) * [CVE-2014-0069](https://ubuntu.com/security/CVE-2014-0069) * [CVE-2014-0049](https://ubuntu.com/security/CVE-2014-0049) ## Related notices * [USN-2442-1](https://ubuntu.com/security/notices/USN-2442-1) * [USN-2441-1](https://ubuntu.com/security/notices/USN-2441-1) * [USN-2227-1](https://ubuntu.com/security/notices/USN-2227-1) * [USN-2221-1](https://ubuntu.com/security/notices/USN-2221-1) * [USN-2181-1](https://ubuntu.com/security/notices/USN-2181-1) * [USN-2180-1](https://ubuntu.com/security/notices/USN-2180-1) * [USN-2179-1](https://ubuntu.com/security/notices/USN-2179-1) * [USN-2178-1](https://ubuntu.com/security/notices/USN-2178-1) * [USN-2177-1](https://ubuntu.com/security/notices/USN-2177-1) * [USN-2176-1](https://ubuntu.com/security/notices/USN-2176-1) --- Have additional questions? [Talk to a member of the team ›](https://wiki.ubuntu.com/SecurityTeam/FAQ?_ga=2.242131138.1744859116.1742138161-1500419473.1726851136&_gl=1*161muja*_gcl_au*MzUyMTIzNjI1LjE3MzYyNDQ4NTE.#Contact)