CVE-2014-5148

Publication date 26 October 2014

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

Description

Xen 4.4.x, when running on an ARM system and “handling an unknown system register access from 64-bit userspace,” returns to an instruction of the trap handler for kernel space faults instead of an instruction that is associated with faults in 64-bit userspace, which allows local guest users to cause a denial of service (crash) and possibly gain privileges via a crafted process.

Read the notes from the security team

Status

Package Ubuntu Release Status
xen 14.10 utopic
Fixed 4.4.1-0ubuntu0.14.10.3
14.04 LTS trusty
Fixed 4.4.1-0ubuntu0.14.04.3
12.04 LTS precise
Not affected
10.04 LTS lucid Not in release
xen-3.3 14.10 utopic Not in release
14.04 LTS trusty Not in release
12.04 LTS precise Not in release
10.04 LTS lucid
Not affected

Notes

mdeslaur

arm-specific

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
xen

References

Other references