1
PublicDateAtUSN: 2014-09-28
2
Candidate: CVE-2014-3184
5
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3184
6
https://code.google.com/p/google-security-research/issues/detail?id=91
7
http://www.openwall.com/lists/oss-security/2014/09/11
8
https://usn.ubuntu.com/usn/usn-2374-1
9
https://usn.ubuntu.com/usn/usn-2375-1
10
https://usn.ubuntu.com/usn/usn-2376-1
11
https://usn.ubuntu.com/usn/usn-2377-1
12
https://usn.ubuntu.com/usn/usn-2378-1
13
https://usn.ubuntu.com/usn/usn-2379-1
15
The report_fixup functions in the HID subsystem in the Linux kernel before
16
3.16.2 might allow physically proximate attackers to cause a denial of
17
service (out-of-bounds write) via a crafted device that provides a small
18
report descriptor, related to (1) drivers/hid/hid-cherry.c, (2)
19
drivers/hid/hid-kye.c, (3) drivers/hid/hid-lg.c, (4)
20
drivers/hid/hid-monterey.c, (5) drivers/hid/hid-petalynx.c, and (6)
21
drivers/hid/hid-sunplus.c.
23
Ben Hawkes reported some off by one errors for report descriptors in the
24
Linux kernel's HID stack. A physically proximate attacker could exploit
25
these flaws to cause a denial of service (out-of-bounds write) via a
26
specially crafted device.
28
jdstrand> android kernels (flo, goldfish, grouper, maguro, mako and manta) are
29
not supported on the Ubuntu Touch 14.04 preview kernels
30
jdstrand> linux-lts-saucy no longer receives official support
31
jdstrand> linux-lts-quantal no longer receives official support
33
https://launchpad.net/bugs/1370035
35
Discovered-by: Reported-by: Ben Hawkes
39
break-fix: - 4ab25786c87eb20857bbb715c3ae34ec8fd6a214
40
upstream_linux: released (3.17~rc2)
41
lucid_linux: released (2.6.32-67.134)
42
precise_linux: released (3.2.0-70.105)
43
precise/esm_linux: released (3.2.0-70.105)
44
trusty_linux: released (3.13.0-37.64)
45
utopic_linux: not-affected (3.16.0-14.20)
46
vivid_linux: not-affected (3.16.0-23.31)
47
vivid/ubuntu-core_linux: not-affected (3.16.0-23.31)
48
vivid/stable-phone-overlay_linux: DNE
49
wily_linux: not-affected (3.19.0-15.15)
50
xenial_linux: not-affected (4.2.0-16.19)
51
yakkety_linux: not-affected (4.4.0-21.37)
52
zesty_linux: not-affected (4.8.0-22.24)
53
devel_linux: not-affected (4.10.0-19.21)
56
upstream_linux-ec2: released (3.17~rc2)
57
lucid_linux-ec2: released (2.6.32-371.87)
58
precise_linux-ec2: DNE
59
precise/esm_linux-ec2: DNE
63
vivid/ubuntu-core_linux-ec2: DNE
64
vivid/stable-phone-overlay_linux-ec2: DNE
67
yakkety_linux-ec2: DNE
71
Patches_linux-mvl-dove:
72
upstream_linux-mvl-dove: released (3.17~rc2)
73
lucid_linux-mvl-dove: ignored (reached end-of-life)
74
precise_linux-mvl-dove: DNE
75
precise/esm_linux-mvl-dove: DNE
76
trusty_linux-mvl-dove: DNE
77
utopic_linux-mvl-dove: DNE
78
vivid_linux-mvl-dove: DNE
79
vivid/ubuntu-core_linux-mvl-dove: DNE
80
vivid/stable-phone-overlay_linux-mvl-dove: DNE
81
wily_linux-mvl-dove: DNE
82
xenial_linux-mvl-dove: DNE
83
yakkety_linux-mvl-dove: DNE
84
zesty_linux-mvl-dove: DNE
85
devel_linux-mvl-dove: DNE
87
Patches_linux-ti-omap4:
88
upstream_linux-ti-omap4: released (3.17~rc2)
89
lucid_linux-ti-omap4: DNE
90
precise_linux-ti-omap4: released (3.2.0-1455.75)
91
precise/esm_linux-ti-omap4: DNE (precise was released [3.2.0-1455.75])
92
trusty_linux-ti-omap4: DNE
93
utopic_linux-ti-omap4: DNE
94
vivid_linux-ti-omap4: DNE
95
vivid/ubuntu-core_linux-ti-omap4: DNE
96
vivid/stable-phone-overlay_linux-ti-omap4: DNE
97
wily_linux-ti-omap4: DNE
98
xenial_linux-ti-omap4: DNE
99
yakkety_linux-ti-omap4: DNE
100
zesty_linux-ti-omap4: DNE
101
devel_linux-ti-omap4: DNE
103
Patches_linux-fsl-imx51:
104
upstream_linux-fsl-imx51: released (3.17~rc2)
105
lucid_linux-fsl-imx51: ignored (reached end-of-life, does not affect buildd)
106
precise_linux-fsl-imx51: DNE
107
precise/esm_linux-fsl-imx51: DNE
108
trusty_linux-fsl-imx51: DNE
109
utopic_linux-fsl-imx51: DNE
110
vivid_linux-fsl-imx51: DNE
111
vivid/ubuntu-core_linux-fsl-imx51: DNE
112
vivid/stable-phone-overlay_linux-fsl-imx51: DNE
113
wily_linux-fsl-imx51: DNE
114
xenial_linux-fsl-imx51: DNE
115
yakkety_linux-fsl-imx51: DNE
116
zesty_linux-fsl-imx51: DNE
117
devel_linux-fsl-imx51: DNE
119
Patches_linux-linaro-omap:
120
upstream_linux-linaro-omap: released (3.17~rc2)
121
lucid_linux-linaro-omap: DNE
122
precise_linux-linaro-omap: ignored (abandoned)
123
precise/esm_linux-linaro-omap: DNE (precise was ignored [abandoned])
124
trusty_linux-linaro-omap: DNE
125
utopic_linux-linaro-omap: DNE
126
vivid_linux-linaro-omap: DNE
127
vivid/ubuntu-core_linux-linaro-omap: DNE
128
vivid/stable-phone-overlay_linux-linaro-omap: DNE
129
wily_linux-linaro-omap: DNE
130
xenial_linux-linaro-omap: DNE
131
yakkety_linux-linaro-omap: DNE
132
zesty_linux-linaro-omap: DNE
133
devel_linux-linaro-omap: DNE
135
Patches_linux-linaro-shared:
136
upstream_linux-linaro-shared: released (3.17~rc2)
137
lucid_linux-linaro-shared: DNE
138
precise_linux-linaro-shared: ignored (abandoned)
139
precise/esm_linux-linaro-shared: DNE (precise was ignored [abandoned])
140
trusty_linux-linaro-shared: DNE
141
utopic_linux-linaro-shared: DNE
142
vivid_linux-linaro-shared: DNE
143
vivid/ubuntu-core_linux-linaro-shared: DNE
144
vivid/stable-phone-overlay_linux-linaro-shared: DNE
145
wily_linux-linaro-shared: DNE
146
xenial_linux-linaro-shared: DNE
147
yakkety_linux-linaro-shared: DNE
148
zesty_linux-linaro-shared: DNE
149
devel_linux-linaro-shared: DNE
151
Patches_linux-linaro-vexpress:
152
upstream_linux-linaro-vexpress: released (3.17~rc2)
153
lucid_linux-linaro-vexpress: DNE
154
precise_linux-linaro-vexpress: ignored (abandoned)
155
precise/esm_linux-linaro-vexpress: DNE (precise was ignored [abandoned])
156
trusty_linux-linaro-vexpress: DNE
157
utopic_linux-linaro-vexpress: DNE
158
vivid_linux-linaro-vexpress: DNE
159
vivid/ubuntu-core_linux-linaro-vexpress: DNE
160
vivid/stable-phone-overlay_linux-linaro-vexpress: DNE
161
wily_linux-linaro-vexpress: DNE
162
xenial_linux-linaro-vexpress: DNE
163
yakkety_linux-linaro-vexpress: DNE
164
zesty_linux-linaro-vexpress: DNE
165
devel_linux-linaro-vexpress: DNE
167
Patches_linux-qcm-msm:
168
upstream_linux-qcm-msm: released (3.17~rc2)
169
lucid_linux-qcm-msm: ignored (abandoned)
170
precise_linux-qcm-msm: ignored (abandoned)
171
precise/esm_linux-qcm-msm: DNE (precise was ignored [abandoned])
172
trusty_linux-qcm-msm: DNE
173
utopic_linux-qcm-msm: DNE
174
vivid_linux-qcm-msm: DNE
175
vivid/ubuntu-core_linux-qcm-msm: DNE
176
vivid/stable-phone-overlay_linux-qcm-msm: DNE
177
wily_linux-qcm-msm: DNE
178
xenial_linux-qcm-msm: DNE
179
yakkety_linux-qcm-msm: DNE
180
zesty_linux-qcm-msm: DNE
181
devel_linux-qcm-msm: DNE
183
Tags_linux-armadaxp: not-ue
184
Patches_linux-armadaxp:
185
upstream_linux-armadaxp: released (3.17~rc2)
186
lucid_linux-armadaxp: DNE
187
precise_linux-armadaxp: released (3.2.0-1639.57)
188
precise/esm_linux-armadaxp: DNE (precise was released [3.2.0-1639.57])
189
trusty_linux-armadaxp: DNE
190
utopic_linux-armadaxp: DNE
191
vivid_linux-armadaxp: DNE
192
vivid/ubuntu-core_linux-armadaxp: DNE
193
vivid/stable-phone-overlay_linux-armadaxp: DNE
194
wily_linux-armadaxp: DNE
195
xenial_linux-armadaxp: DNE
196
yakkety_linux-armadaxp: DNE
197
zesty_linux-armadaxp: DNE
198
devel_linux-armadaxp: DNE
200
Tags_linux-lts-quantal: not-ue
201
Patches_linux-lts-quantal: DNE
202
upstream_linux-lts-quantal: released (3.17~rc2)
203
lucid_linux-lts-quantal: DNE
204
precise_linux-lts-quantal: ignored (was pending [3.5.0-56.83~precise1] OEM release)
205
precise/esm_linux-lts-quantal: DNE (precise was ignored [was pending [3.5.0-56.83~precise1] OEM release])
206
trusty_linux-lts-quantal: DNE
207
utopic_linux-lts-quantal: DNE
208
vivid_linux-lts-quantal: DNE
209
vivid/ubuntu-core_linux-lts-quantal: DNE
210
vivid/stable-phone-overlay_linux-lts-quantal: DNE
211
wily_linux-lts-quantal: DNE
212
xenial_linux-lts-quantal: DNE
213
yakkety_linux-lts-quantal: DNE
214
zesty_linux-lts-quantal: DNE
215
devel_linux-lts-quantal: DNE
217
Patches_linux-lts-raring:
218
upstream_linux-lts-raring: released (3.17~rc2)
219
lucid_linux-lts-raring: DNE
220
precise_linux-lts-raring: ignored (was needs-triage now end-of-life)
221
precise/esm_linux-lts-raring: DNE (precise was ignored [was needs-triage now end-of-life])
222
trusty_linux-lts-raring: DNE
223
utopic_linux-lts-raring: DNE
224
vivid_linux-lts-raring: DNE
225
vivid/ubuntu-core_linux-lts-raring: DNE
226
vivid/stable-phone-overlay_linux-lts-raring: DNE
227
wily_linux-lts-raring: DNE
228
xenial_linux-lts-raring: DNE
229
yakkety_linux-lts-raring: DNE
230
zesty_linux-lts-raring: DNE
231
devel_linux-lts-raring: DNE
233
Tags_linux-lts-saucy: not-ue
234
Patches_linux-lts-saucy:
235
upstream_linux-lts-saucy: released (3.17~rc2)
236
lucid_linux-lts-saucy: DNE
237
precise_linux-lts-saucy: ignored (was pending [3.11.0-29.49~precise1] OEM release)
238
precise/esm_linux-lts-saucy: DNE (precise was ignored [was pending [3.11.0-29.49~precise1] OEM release])
239
trusty_linux-lts-saucy: DNE
240
utopic_linux-lts-saucy: DNE
241
vivid_linux-lts-saucy: DNE
242
vivid/ubuntu-core_linux-lts-saucy: DNE
243
vivid/stable-phone-overlay_linux-lts-saucy: DNE
244
wily_linux-lts-saucy: DNE
245
xenial_linux-lts-saucy: DNE
246
yakkety_linux-lts-saucy: DNE
247
zesty_linux-lts-saucy: DNE
248
devel_linux-lts-saucy: DNE
250
Patches_linux-lts-trusty:
251
upstream_linux-lts-trusty: released (3.17~rc2)
252
lucid_linux-lts-trusty: DNE
253
precise_linux-lts-trusty: released (3.13.0-37.64~precise1)
254
precise/esm_linux-lts-trusty: released (3.13.0-37.64~precise1)
255
trusty_linux-lts-trusty: DNE
256
utopic_linux-lts-trusty: DNE
257
vivid_linux-lts-trusty: DNE
258
vivid/ubuntu-core_linux-lts-trusty: DNE
259
vivid/stable-phone-overlay_linux-lts-trusty: DNE
260
wily_linux-lts-trusty: DNE
261
xenial_linux-lts-trusty: DNE
262
yakkety_linux-lts-trusty: DNE
263
zesty_linux-lts-trusty: DNE
264
devel_linux-lts-trusty: DNE
266
Patches_linux-goldfish:
267
upstream_linux-goldfish: released (3.17~rc2)
268
lucid_linux-goldfish: DNE
269
precise_linux-goldfish: DNE
270
precise/esm_linux-goldfish: DNE
271
trusty_linux-goldfish: ignored
272
utopic_linux-goldfish: ignored (reached end-of-life)
273
vivid_linux-goldfish: ignored (reached end-of-life)
274
vivid/ubuntu-core_linux-goldfish: DNE
275
vivid/stable-phone-overlay_linux-goldfish: DNE
276
wily_linux-goldfish: ignored (reached end-of-life)
277
xenial_linux-goldfish: ignored (abandoned)
278
yakkety_linux-goldfish: ignored (abandoned)
279
zesty_linux-goldfish: ignored (abandoned)
280
devel_linux-goldfish: DNE
282
Patches_linux-grouper:
283
upstream_linux-grouper: released (3.17~rc2)
284
lucid_linux-grouper: DNE
285
precise_linux-grouper: DNE
286
precise/esm_linux-grouper: DNE
287
trusty_linux-grouper: ignored
288
utopic_linux-grouper: ignored (reached end-of-life)
289
vivid_linux-grouper: DNE
290
vivid/ubuntu-core_linux-grouper: DNE
291
vivid/stable-phone-overlay_linux-grouper: DNE
292
wily_linux-grouper: DNE
293
xenial_linux-grouper: DNE
294
yakkety_linux-grouper: DNE
295
zesty_linux-grouper: DNE
296
devel_linux-grouper: DNE
298
Patches_linux-maguro:
299
upstream_linux-maguro: released (3.17~rc2)
300
lucid_linux-maguro: DNE
301
precise_linux-maguro: DNE
302
precise/esm_linux-maguro: DNE
303
trusty_linux-maguro: ignored
304
utopic_linux-maguro: DNE
305
vivid_linux-maguro: DNE
306
vivid/ubuntu-core_linux-maguro: DNE
307
vivid/stable-phone-overlay_linux-maguro: DNE
308
wily_linux-maguro: DNE
309
xenial_linux-maguro: DNE
310
yakkety_linux-maguro: DNE
311
zesty_linux-maguro: DNE
312
devel_linux-maguro: DNE
315
upstream_linux-mako: released (3.17~rc2)
316
lucid_linux-mako: DNE
317
precise_linux-mako: DNE
318
precise/esm_linux-mako: DNE
319
trusty_linux-mako: ignored
320
utopic_linux-mako: ignored (reached end-of-life)
321
vivid_linux-mako: ignored (reached end-of-life)
322
vivid/ubuntu-core_linux-mako: DNE
323
vivid/stable-phone-overlay_linux-mako: ignored (abandoned)
324
wily_linux-mako: ignored (reached end-of-life)
325
xenial_linux-mako: ignored (abandoned)
326
yakkety_linux-mako: ignored (abandoned)
327
zesty_linux-mako: DNE
328
devel_linux-mako: DNE
331
upstream_linux-manta: released (3.17~rc2)
332
lucid_linux-manta: DNE
333
precise_linux-manta: DNE
334
precise/esm_linux-manta: DNE
335
trusty_linux-manta: ignored
336
utopic_linux-manta: ignored (reached end-of-life)
337
vivid_linux-manta: ignored (reached end-of-life)
338
vivid/ubuntu-core_linux-manta: DNE
339
vivid/stable-phone-overlay_linux-manta: DNE
340
wily_linux-manta: ignored (reached end-of-life)
341
xenial_linux-manta: DNE
342
yakkety_linux-manta: DNE
343
zesty_linux-manta: DNE
344
devel_linux-manta: DNE
347
upstream_linux-flo: released (3.17~rc2)
349
precise_linux-flo: DNE
350
precise/esm_linux-flo: DNE
351
trusty_linux-flo: ignored
352
utopic_linux-flo: ignored (reached end-of-life)
353
vivid_linux-flo: ignored (reached end-of-life)
354
vivid/ubuntu-core_linux-flo: DNE
355
vivid/stable-phone-overlay_linux-flo: ignored (abandoned)
356
wily_linux-flo: ignored (reached end-of-life)
357
xenial_linux-flo: ignored (abandoned)
358
yakkety_linux-flo: ignored (abandoned)
362
Patches_linux-lts-utopic:
363
upstream_linux-lts-utopic: released (3.17~rc2)
364
lucid_linux-lts-utopic: DNE
365
precise_linux-lts-utopic: DNE
366
precise/esm_linux-lts-utopic: DNE
367
trusty_linux-lts-utopic: not-affected (3.16.0-25.33~14.04.2)
368
utopic_linux-lts-utopic: DNE
369
vivid_linux-lts-utopic: DNE
370
vivid/ubuntu-core_linux-lts-utopic: DNE
371
vivid/stable-phone-overlay_linux-lts-utopic: DNE
372
wily_linux-lts-utopic: DNE
373
xenial_linux-lts-utopic: DNE
374
yakkety_linux-lts-utopic: DNE
375
zesty_linux-lts-utopic: DNE
376
devel_linux-lts-utopic: DNE
378
Patches_linux-lts-vivid:
379
upstream_linux-lts-vivid: released (3.17~rc2)
380
lucid_linux-lts-vivid: DNE
381
precise_linux-lts-vivid: DNE
382
precise/esm_linux-lts-vivid: DNE
383
trusty_linux-lts-vivid: not-affected (3.19.0-18.18~14.04.1)
384
utopic_linux-lts-vivid: DNE
385
vivid_linux-lts-vivid: DNE
386
vivid/ubuntu-core_linux-lts-vivid: DNE
387
vivid/stable-phone-overlay_linux-lts-vivid: DNE
388
wily_linux-lts-vivid: DNE
389
xenial_linux-lts-vivid: DNE
390
yakkety_linux-lts-vivid: DNE
391
zesty_linux-lts-vivid: DNE
392
devel_linux-lts-vivid: DNE
394
Patches_linux-krillin:
395
product_linux-krillin: ignored (was needed now end-of-life)
397
Patches_linux-vegetahd:
398
product_linux-vegetahd: ignored (was needed now end-of-life)
400
Patches_linux-lts-wily:
401
upstream_linux-lts-wily: released (3.17~rc2)
402
precise_linux-lts-wily: DNE
403
precise/esm_linux-lts-wily: DNE
404
trusty_linux-lts-wily: not-affected (4.2.0-18.22~14.04.1)
405
vivid_linux-lts-wily: DNE
406
vivid/ubuntu-core_linux-lts-wily: DNE
407
vivid/stable-phone-overlay_linux-lts-wily: DNE
408
wily_linux-lts-wily: DNE
409
xenial_linux-lts-wily: DNE
410
yakkety_linux-lts-wily: DNE
411
zesty_linux-lts-wily: DNE
412
devel_linux-lts-wily: DNE
414
Patches_linux-raspi2:
415
upstream_linux-raspi2: released (3.17~rc2)
416
precise_linux-raspi2: DNE
417
precise/esm_linux-raspi2: DNE
418
trusty_linux-raspi2: DNE
419
vivid_linux-raspi2: DNE
420
vivid/ubuntu-core_linux-raspi2: released (4.2.0-1014.21)
421
vivid/stable-phone-overlay_linux-raspi2: DNE
422
wily_linux-raspi2: not-affected (4.2.0-1008.12)
423
xenial_linux-raspi2: not-affected (4.2.0-1013.19)
424
yakkety_linux-raspi2: not-affected (4.4.0-1009.10)
425
zesty_linux-raspi2: not-affected (4.8.0-1013.15)
426
devel_linux-raspi2: not-affected (4.10.0-1004.6)
428
Patches_linux-lts-xenial:
429
upstream_linux-lts-xenial: released (3.17~rc2)
430
precise_linux-lts-xenial: DNE
431
precise/esm_linux-lts-xenial: DNE
432
trusty_linux-lts-xenial: not-affected (4.4.0-13.29~14.04.1)
433
vivid_linux-lts-xenial: DNE
434
vivid/ubuntu-core_linux-lts-xenial: DNE
435
vivid/stable-phone-overlay_linux-lts-xenial: DNE
436
wily_linux-lts-xenial: DNE
437
xenial_linux-lts-xenial: DNE
438
yakkety_linux-lts-xenial: DNE
439
zesty_linux-lts-xenial: DNE
440
devel_linux-lts-xenial: DNE
442
Patches_linux-snapdragon:
443
upstream_linux-snapdragon: released (3.17~rc2)
444
precise_linux-snapdragon: DNE
445
precise/esm_linux-snapdragon: DNE
446
trusty_linux-snapdragon: DNE
447
vivid/ubuntu-core_linux-snapdragon: DNE
448
vivid/stable-phone-overlay_linux-snapdragon: DNE
449
wily_linux-snapdragon: DNE
450
xenial_linux-snapdragon: not-affected (4.4.0-1012.12)
451
yakkety_linux-snapdragon: not-affected (4.4.0-1012.12)
452
zesty_linux-snapdragon: not-affected (4.4.0-1029.32)
453
devel_linux-snapdragon: not-affected (4.4.0-1050.54)
456
upstream_linux-aws: released (3.17~rc2)
457
precise_linux-aws: DNE
458
precise/esm_linux-aws: DNE
459
trusty_linux-aws: not-affected (4.4.0-1002.2)
460
vivid/ubuntu-core_linux-aws: DNE
461
vivid/stable-phone-overlay_linux-aws: DNE
462
xenial_linux-aws: not-affected (4.4.0-1001.10)
463
yakkety_linux-aws: DNE
467
Patches_linux-hwe-edge:
468
upstream_linux-hwe-edge: released (3.17~rc2)
469
precise_linux-hwe-edge: DNE
470
precise/esm_linux-hwe-edge: DNE
471
trusty_linux-hwe-edge: DNE
472
vivid/ubuntu-core_linux-hwe-edge: DNE
473
vivid/stable-phone-overlay_linux-hwe-edge: DNE
474
xenial_linux-hwe-edge: not-affected (4.8.0-28.30~16.04.1)
475
yakkety_linux-hwe-edge: DNE
476
zesty_linux-hwe-edge: DNE
477
devel_linux-hwe-edge: DNE
480
upstream_linux-hwe: released (3.17~rc2)
481
precise_linux-hwe: DNE
482
precise/esm_linux-hwe: DNE
483
trusty_linux-hwe: DNE
484
vivid/ubuntu-core_linux-hwe: DNE
485
vivid/stable-phone-overlay_linux-hwe: DNE
486
xenial_linux-hwe: not-affected (4.8.0-36.36~16.04.1)
487
yakkety_linux-hwe: DNE
492
upstream_linux-gke: released (3.17~rc2)
493
precise_linux-gke: DNE
494
precise/esm_linux-gke: DNE
495
trusty_linux-gke: DNE
496
vivid/ubuntu-core_linux-gke: DNE
497
vivid/stable-phone-overlay_linux-gke: DNE
498
xenial_linux-gke: not-affected (4.4.0-1003.3)
499
yakkety_linux-gke: DNE