Launchpad.net

CVE 2014-4157

arch/mips/include/asm/thread_info.h in the Linux kernel before 3.14.8 on the MIPS platform does not configure _TIF_SECCOMP checks on the fast system-call path, which allows local users to bypass intended PR_SET_SECCOMP restrictions by executing a crafted application without invoking a trace or audit subsystem.

Related bugs and status

CVE-2014-4157 (Candidate) is related to these bugs:

Bug #1333614: CVE-2014-4157

		In	Importance	Status
1333614	CVE-2014-4157	linux (Ubuntu)	Medium	Invalid
1333614	CVE-2014-4157	linux-fsl-imx51 (Ubuntu)	Medium	Invalid
1333614	CVE-2014-4157	linux-mvl-dove (Ubuntu)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-backport-maverick (Ubuntu)	Undecided	Invalid
1333614	CVE-2014-4157	linux-lts-backport-natty (Ubuntu)	Undecided	Invalid
1333614	CVE-2014-4157	linux-ti-omap4 (Ubuntu)	Medium	Invalid
1333614	CVE-2014-4157	linux-ec2 (Ubuntu)	Medium	Invalid
1333614	CVE-2014-4157	linux (Ubuntu Utopic)	Medium	Invalid
1333614	CVE-2014-4157	linux-ec2 (Ubuntu Utopic)	Medium	Invalid
1333614	CVE-2014-4157	linux-fsl-imx51 (Ubuntu Utopic)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-backport-maverick (Ubuntu Utopic)	Undecided	Won't Fix
1333614	CVE-2014-4157	linux-lts-backport-natty (Ubuntu Utopic)	Undecided	Won't Fix
1333614	CVE-2014-4157	linux-mvl-dove (Ubuntu Utopic)	Medium	Invalid
1333614	CVE-2014-4157	linux-ti-omap4 (Ubuntu Utopic)	Medium	Invalid
1333614	CVE-2014-4157	linux (Ubuntu Trusty)	Medium	Invalid
1333614	CVE-2014-4157	linux-ec2 (Ubuntu Trusty)	Medium	Invalid
1333614	CVE-2014-4157	linux-fsl-imx51 (Ubuntu Trusty)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-backport-maverick (Ubuntu Trusty)	Undecided	Won't Fix
1333614	CVE-2014-4157	linux-lts-backport-natty (Ubuntu Trusty)	Undecided	Won't Fix
1333614	CVE-2014-4157	linux-mvl-dove (Ubuntu Trusty)	Medium	Invalid
1333614	CVE-2014-4157	linux-ti-omap4 (Ubuntu Trusty)	Medium	Invalid
1333614	CVE-2014-4157	linux (Ubuntu Saucy)	Medium	Won't Fix
1333614	CVE-2014-4157	linux-ec2 (Ubuntu Saucy)	Medium	Invalid
1333614	CVE-2014-4157	linux-fsl-imx51 (Ubuntu Saucy)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-backport-maverick (Ubuntu Saucy)	Undecided	Won't Fix
1333614	CVE-2014-4157	linux-lts-backport-natty (Ubuntu Saucy)	Undecided	Won't Fix
1333614	CVE-2014-4157	linux-mvl-dove (Ubuntu Saucy)	Medium	Invalid
1333614	CVE-2014-4157	linux-ti-omap4 (Ubuntu Saucy)	Medium	Won't Fix
1333614	CVE-2014-4157	linux (Ubuntu Precise)	Medium	Invalid
1333614	CVE-2014-4157	linux-ec2 (Ubuntu Precise)	Medium	Invalid
1333614	CVE-2014-4157	linux-fsl-imx51 (Ubuntu Precise)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-backport-maverick (Ubuntu Precise)	Undecided	Won't Fix
1333614	CVE-2014-4157	linux-lts-backport-natty (Ubuntu Precise)	Undecided	Won't Fix
1333614	CVE-2014-4157	linux-mvl-dove (Ubuntu Precise)	Medium	Invalid
1333614	CVE-2014-4157	linux-ti-omap4 (Ubuntu Precise)	Medium	Invalid
1333614	CVE-2014-4157	linux (Ubuntu Lucid)	Medium	Invalid
1333614	CVE-2014-4157	linux-ec2 (Ubuntu Lucid)	Medium	Invalid
1333614	CVE-2014-4157	linux-fsl-imx51 (Ubuntu Lucid)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-backport-maverick (Ubuntu Lucid)	Undecided	Won't Fix
1333614	CVE-2014-4157	linux-lts-backport-natty (Ubuntu Lucid)	Undecided	Won't Fix
1333614	CVE-2014-4157	linux-mvl-dove (Ubuntu Lucid)	Medium	Invalid
1333614	CVE-2014-4157	linux-ti-omap4 (Ubuntu Lucid)	Medium	Invalid
1333614	CVE-2014-4157	linux-armadaxp (Ubuntu)	Medium	Invalid
1333614	CVE-2014-4157	linux-armadaxp (Ubuntu Lucid)	Medium	Invalid
1333614	CVE-2014-4157	linux-armadaxp (Ubuntu Precise)	Medium	Invalid
1333614	CVE-2014-4157	linux-armadaxp (Ubuntu Saucy)	Medium	Invalid
1333614	CVE-2014-4157	linux-armadaxp (Ubuntu Trusty)	Medium	Invalid
1333614	CVE-2014-4157	linux-armadaxp (Ubuntu Utopic)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-saucy (Ubuntu)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-saucy (Ubuntu Lucid)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-saucy (Ubuntu Precise)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-saucy (Ubuntu Saucy)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-saucy (Ubuntu Trusty)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-saucy (Ubuntu Utopic)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-quantal (Ubuntu)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-quantal (Ubuntu Lucid)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-quantal (Ubuntu Precise)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-quantal (Ubuntu Saucy)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-quantal (Ubuntu Trusty)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-quantal (Ubuntu Utopic)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-raring (Ubuntu)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-raring (Ubuntu Lucid)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-raring (Ubuntu Precise)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-raring (Ubuntu Saucy)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-raring (Ubuntu Trusty)	Medium	Invalid
1333614	CVE-2014-4157	linux-lts-raring (Ubuntu Utopic)	Medium	Invalid

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2014-4157

Related bugs and status

Related bugs

References