1
PublicDateAtUSN: 2015-03-16
2
Candidate: CVE-2015-1593
5
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1593
6
http://www.openwall.com/lists/oss-security/2015/02/13/13
7
http://hmarco.org/bugs/linux-ASLR-integer-overflow.html
8
http://hmarco.org/bugs/patches/fix_randomize_stack_top_properly_linux_3-17.1.patch
9
https://usn.ubuntu.com/usn/usn-2560-1
10
https://usn.ubuntu.com/usn/usn-2561-1
11
https://usn.ubuntu.com/usn/usn-2562-1
12
https://usn.ubuntu.com/usn/usn-2563-1
13
https://usn.ubuntu.com/usn/usn-2564-1
14
https://usn.ubuntu.com/usn/usn-2565-1
16
The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit
17
platforms uses incorrect data types for the results of bitwise left-shift
18
operations, which makes it easier for attackers to bypass the ASLR
19
protection mechanism by predicting the address of the top of the stack,
20
related to the randomize_stack_top function in fs/binfmt_elf.c and the
21
stack_maxrandom_size function in arch/x86/mm/mmap.c.
23
An integer overflow was discovered in the stack randomization feature of
24
the Linux kernel on 64 bit platforms. A local attacker could exploit this
25
flaw to bypass the Address Space Layout Randomization (ASLR) protection
28
jdstrand> android kernels (flo, goldfish, grouper, maguro, mako and manta) are
29
not supported on the Ubuntu Touch 14.10 and earlier preview kernels
30
jdstrand> linux-lts-saucy no longer receives official support
31
jdstrand> linux-lts-quantal no longer receives official support
33
https://launchpad.net/bugs/1423757
35
Discovered-by: Hector Marco & Ismael Ripoll
39
break-fix: - 4e7c22d447bb6d7e37bfe39ff658486ae78e8d77
40
upstream_linux: released (4.0~rc1)
41
lucid_linux: ignored (reached end-of-life)
42
precise_linux: released (3.2.0-80.116)
43
precise/esm_linux: released (3.2.0-80.116)
44
trusty_linux: released (3.13.0-49.81)
45
utopic_linux: released (3.16.0-34.45)
46
vivid_linux: not-affected (3.19.0-8.8)
47
vivid/ubuntu-core_linux: not-affected (3.19.0-8.8)
48
vivid/stable-phone-overlay_linux: DNE
49
wily_linux: not-affected (3.19.0-15.15)
50
xenial_linux: not-affected (4.2.0-16.19)
51
yakkety_linux: not-affected (4.4.0-21.37)
52
zesty_linux: not-affected (4.8.0-22.24)
53
devel_linux: not-affected (4.10.0-19.21)
56
upstream_linux-ec2: released (4.0~rc1)
57
lucid_linux-ec2: ignored (reached end-of-life)
58
precise_linux-ec2: DNE
59
precise/esm_linux-ec2: DNE
63
vivid/ubuntu-core_linux-ec2: DNE
64
vivid/stable-phone-overlay_linux-ec2: DNE
67
yakkety_linux-ec2: DNE
71
Patches_linux-mvl-dove:
72
upstream_linux-mvl-dove: released (4.0~rc1)
73
lucid_linux-mvl-dove: ignored (reached end-of-life)
74
precise_linux-mvl-dove: DNE
75
precise/esm_linux-mvl-dove: DNE
76
trusty_linux-mvl-dove: DNE
77
utopic_linux-mvl-dove: DNE
78
vivid_linux-mvl-dove: DNE
79
vivid/ubuntu-core_linux-mvl-dove: DNE
80
vivid/stable-phone-overlay_linux-mvl-dove: DNE
81
wily_linux-mvl-dove: DNE
82
xenial_linux-mvl-dove: DNE
83
yakkety_linux-mvl-dove: DNE
84
zesty_linux-mvl-dove: DNE
85
devel_linux-mvl-dove: DNE
87
Patches_linux-ti-omap4:
88
upstream_linux-ti-omap4: released (4.0~rc1)
89
lucid_linux-ti-omap4: DNE
90
precise_linux-ti-omap4: released (3.2.0-1462.82)
91
precise/esm_linux-ti-omap4: DNE (precise was released [3.2.0-1462.82])
92
trusty_linux-ti-omap4: DNE
93
utopic_linux-ti-omap4: DNE
94
vivid_linux-ti-omap4: DNE
95
vivid/ubuntu-core_linux-ti-omap4: DNE
96
vivid/stable-phone-overlay_linux-ti-omap4: DNE
97
wily_linux-ti-omap4: DNE
98
xenial_linux-ti-omap4: DNE
99
yakkety_linux-ti-omap4: DNE
100
zesty_linux-ti-omap4: DNE
101
devel_linux-ti-omap4: DNE
103
Patches_linux-fsl-imx51:
104
upstream_linux-fsl-imx51: released (4.0~rc1)
105
lucid_linux-fsl-imx51: ignored (reached end-of-life, does not affect buildd)
106
precise_linux-fsl-imx51: DNE
107
precise/esm_linux-fsl-imx51: DNE
108
trusty_linux-fsl-imx51: DNE
109
utopic_linux-fsl-imx51: DNE
110
vivid_linux-fsl-imx51: DNE
111
vivid/ubuntu-core_linux-fsl-imx51: DNE
112
vivid/stable-phone-overlay_linux-fsl-imx51: DNE
113
wily_linux-fsl-imx51: DNE
114
xenial_linux-fsl-imx51: DNE
115
yakkety_linux-fsl-imx51: DNE
116
zesty_linux-fsl-imx51: DNE
117
devel_linux-fsl-imx51: DNE
119
Patches_linux-linaro-omap:
120
upstream_linux-linaro-omap: released (4.0~rc1)
121
lucid_linux-linaro-omap: DNE
122
precise_linux-linaro-omap: ignored (abandoned)
123
precise/esm_linux-linaro-omap: DNE (precise was ignored [abandoned])
124
trusty_linux-linaro-omap: DNE
125
utopic_linux-linaro-omap: DNE
126
vivid_linux-linaro-omap: DNE
127
vivid/ubuntu-core_linux-linaro-omap: DNE
128
vivid/stable-phone-overlay_linux-linaro-omap: DNE
129
wily_linux-linaro-omap: DNE
130
xenial_linux-linaro-omap: DNE
131
yakkety_linux-linaro-omap: DNE
132
zesty_linux-linaro-omap: DNE
133
devel_linux-linaro-omap: DNE
135
Patches_linux-linaro-shared:
136
upstream_linux-linaro-shared: released (4.0~rc1)
137
lucid_linux-linaro-shared: DNE
138
precise_linux-linaro-shared: ignored (abandoned)
139
precise/esm_linux-linaro-shared: DNE (precise was ignored [abandoned])
140
trusty_linux-linaro-shared: DNE
141
utopic_linux-linaro-shared: DNE
142
vivid_linux-linaro-shared: DNE
143
vivid/ubuntu-core_linux-linaro-shared: DNE
144
vivid/stable-phone-overlay_linux-linaro-shared: DNE
145
wily_linux-linaro-shared: DNE
146
xenial_linux-linaro-shared: DNE
147
yakkety_linux-linaro-shared: DNE
148
zesty_linux-linaro-shared: DNE
149
devel_linux-linaro-shared: DNE
151
Patches_linux-linaro-vexpress:
152
upstream_linux-linaro-vexpress: released (4.0~rc1)
153
lucid_linux-linaro-vexpress: DNE
154
precise_linux-linaro-vexpress: ignored (abandoned)
155
precise/esm_linux-linaro-vexpress: DNE (precise was ignored [abandoned])
156
trusty_linux-linaro-vexpress: DNE
157
utopic_linux-linaro-vexpress: DNE
158
vivid_linux-linaro-vexpress: DNE
159
vivid/ubuntu-core_linux-linaro-vexpress: DNE
160
vivid/stable-phone-overlay_linux-linaro-vexpress: DNE
161
wily_linux-linaro-vexpress: DNE
162
xenial_linux-linaro-vexpress: DNE
163
yakkety_linux-linaro-vexpress: DNE
164
zesty_linux-linaro-vexpress: DNE
165
devel_linux-linaro-vexpress: DNE
167
Patches_linux-qcm-msm:
168
upstream_linux-qcm-msm: released (4.0~rc1)
169
lucid_linux-qcm-msm: ignored (abandoned)
170
precise_linux-qcm-msm: ignored (abandoned)
171
precise/esm_linux-qcm-msm: DNE (precise was ignored [abandoned])
172
trusty_linux-qcm-msm: DNE
173
utopic_linux-qcm-msm: DNE
174
vivid_linux-qcm-msm: DNE
175
vivid/ubuntu-core_linux-qcm-msm: DNE
176
vivid/stable-phone-overlay_linux-qcm-msm: DNE
177
wily_linux-qcm-msm: DNE
178
xenial_linux-qcm-msm: DNE
179
yakkety_linux-qcm-msm: DNE
180
zesty_linux-qcm-msm: DNE
181
devel_linux-qcm-msm: DNE
183
Tags_linux-armadaxp: not-ue
184
Patches_linux-armadaxp:
185
upstream_linux-armadaxp: released (4.0~rc1)
186
lucid_linux-armadaxp: DNE
187
precise_linux-armadaxp: released (3.2.0-1648.67)
188
precise/esm_linux-armadaxp: DNE (precise was released [3.2.0-1648.67])
189
trusty_linux-armadaxp: DNE
190
utopic_linux-armadaxp: DNE
191
vivid_linux-armadaxp: DNE
192
vivid/ubuntu-core_linux-armadaxp: DNE
193
vivid/stable-phone-overlay_linux-armadaxp: DNE
194
wily_linux-armadaxp: DNE
195
xenial_linux-armadaxp: DNE
196
yakkety_linux-armadaxp: DNE
197
zesty_linux-armadaxp: DNE
198
devel_linux-armadaxp: DNE
200
Tags_linux-lts-quantal: not-ue
201
Patches_linux-lts-quantal: DNE
202
upstream_linux-lts-quantal: released (4.0~rc1)
203
lucid_linux-lts-quantal: DNE
204
precise_linux-lts-quantal: ignored (was pending [3.5.0-60.87~precise1] OEM release)
205
precise/esm_linux-lts-quantal: DNE (precise was ignored [was pending [3.5.0-60.87~precise1] OEM release])
206
trusty_linux-lts-quantal: DNE
207
utopic_linux-lts-quantal: DNE
208
vivid_linux-lts-quantal: DNE
209
vivid/ubuntu-core_linux-lts-quantal: DNE
210
vivid/stable-phone-overlay_linux-lts-quantal: DNE
211
wily_linux-lts-quantal: DNE
212
xenial_linux-lts-quantal: DNE
213
yakkety_linux-lts-quantal: DNE
214
zesty_linux-lts-quantal: DNE
215
devel_linux-lts-quantal: DNE
217
Patches_linux-lts-raring:
218
upstream_linux-lts-raring: released (4.0~rc1)
219
lucid_linux-lts-raring: DNE
220
precise_linux-lts-raring: ignored (was needs-triage now end-of-life)
221
precise/esm_linux-lts-raring: DNE (precise was ignored [was needs-triage now end-of-life])
222
trusty_linux-lts-raring: DNE
223
utopic_linux-lts-raring: DNE
224
vivid_linux-lts-raring: DNE
225
vivid/ubuntu-core_linux-lts-raring: DNE
226
vivid/stable-phone-overlay_linux-lts-raring: DNE
227
wily_linux-lts-raring: DNE
228
xenial_linux-lts-raring: DNE
229
yakkety_linux-lts-raring: DNE
230
zesty_linux-lts-raring: DNE
231
devel_linux-lts-raring: DNE
233
Tags_linux-lts-saucy: not-ue
234
Patches_linux-lts-saucy:
235
upstream_linux-lts-saucy: released (4.0~rc1)
236
lucid_linux-lts-saucy: DNE
237
precise_linux-lts-saucy: ignored (was pending [3.11.0-33.54~precise1] OEM release)
238
precise/esm_linux-lts-saucy: DNE (precise was ignored [was pending [3.11.0-33.54~precise1] OEM release])
239
trusty_linux-lts-saucy: DNE
240
utopic_linux-lts-saucy: DNE
241
vivid_linux-lts-saucy: DNE
242
vivid/ubuntu-core_linux-lts-saucy: DNE
243
vivid/stable-phone-overlay_linux-lts-saucy: DNE
244
wily_linux-lts-saucy: DNE
245
xenial_linux-lts-saucy: DNE
246
yakkety_linux-lts-saucy: DNE
247
zesty_linux-lts-saucy: DNE
248
devel_linux-lts-saucy: DNE
250
Patches_linux-lts-trusty:
251
upstream_linux-lts-trusty: released (4.0~rc1)
252
lucid_linux-lts-trusty: DNE
253
precise_linux-lts-trusty: released (3.13.0-49.81~precise1)
254
precise/esm_linux-lts-trusty: released (3.13.0-49.81~precise1)
255
trusty_linux-lts-trusty: DNE
256
utopic_linux-lts-trusty: DNE
257
vivid_linux-lts-trusty: DNE
258
vivid/ubuntu-core_linux-lts-trusty: DNE
259
vivid/stable-phone-overlay_linux-lts-trusty: DNE
260
wily_linux-lts-trusty: DNE
261
xenial_linux-lts-trusty: DNE
262
yakkety_linux-lts-trusty: DNE
263
zesty_linux-lts-trusty: DNE
264
devel_linux-lts-trusty: DNE
266
Patches_linux-goldfish:
267
upstream_linux-goldfish: released (4.0~rc1)
268
lucid_linux-goldfish: DNE
269
precise_linux-goldfish: DNE
270
precise/esm_linux-goldfish: DNE
271
trusty_linux-goldfish: ignored
272
utopic_linux-goldfish: ignored (reached end-of-life)
273
vivid_linux-goldfish: ignored (reached end-of-life)
274
vivid/ubuntu-core_linux-goldfish: DNE
275
vivid/stable-phone-overlay_linux-goldfish: DNE
276
wily_linux-goldfish: ignored (reached end-of-life)
277
xenial_linux-goldfish: ignored (abandoned)
278
yakkety_linux-goldfish: ignored (abandoned)
279
zesty_linux-goldfish: ignored (abandoned)
280
devel_linux-goldfish: DNE
282
Patches_linux-grouper:
283
upstream_linux-grouper: released (4.0~rc1)
284
lucid_linux-grouper: DNE
285
precise_linux-grouper: DNE
286
precise/esm_linux-grouper: DNE
287
trusty_linux-grouper: ignored
288
utopic_linux-grouper: ignored (reached end-of-life)
289
vivid_linux-grouper: DNE
290
vivid/ubuntu-core_linux-grouper: DNE
291
vivid/stable-phone-overlay_linux-grouper: DNE
292
wily_linux-grouper: DNE
293
xenial_linux-grouper: DNE
294
yakkety_linux-grouper: DNE
295
zesty_linux-grouper: DNE
296
devel_linux-grouper: DNE
298
Patches_linux-maguro:
299
upstream_linux-maguro: released (4.0~rc1)
300
lucid_linux-maguro: DNE
301
precise_linux-maguro: DNE
302
precise/esm_linux-maguro: DNE
303
trusty_linux-maguro: ignored
304
utopic_linux-maguro: DNE
305
vivid_linux-maguro: DNE
306
vivid/ubuntu-core_linux-maguro: DNE
307
vivid/stable-phone-overlay_linux-maguro: DNE
308
wily_linux-maguro: DNE
309
xenial_linux-maguro: DNE
310
yakkety_linux-maguro: DNE
311
zesty_linux-maguro: DNE
312
devel_linux-maguro: DNE
315
upstream_linux-mako: released (4.0~rc1)
316
lucid_linux-mako: DNE
317
precise_linux-mako: DNE
318
precise/esm_linux-mako: DNE
319
trusty_linux-mako: ignored
320
utopic_linux-mako: ignored (reached end-of-life)
321
vivid_linux-mako: ignored (reached end-of-life)
322
vivid/ubuntu-core_linux-mako: DNE
323
vivid/stable-phone-overlay_linux-mako: ignored (abandoned)
324
wily_linux-mako: ignored (reached end-of-life)
325
xenial_linux-mako: ignored (abandoned)
326
yakkety_linux-mako: ignored (abandoned)
327
zesty_linux-mako: DNE
328
devel_linux-mako: DNE
331
upstream_linux-manta: released (4.0~rc1)
332
lucid_linux-manta: DNE
333
precise_linux-manta: DNE
334
precise/esm_linux-manta: DNE
335
trusty_linux-manta: ignored
336
utopic_linux-manta: ignored (reached end-of-life)
337
vivid_linux-manta: ignored (reached end-of-life)
338
vivid/ubuntu-core_linux-manta: DNE
339
vivid/stable-phone-overlay_linux-manta: DNE
340
wily_linux-manta: ignored (reached end-of-life)
341
xenial_linux-manta: DNE
342
yakkety_linux-manta: DNE
343
zesty_linux-manta: DNE
344
devel_linux-manta: DNE
347
upstream_linux-flo: released (4.0~rc1)
349
precise_linux-flo: DNE
350
precise/esm_linux-flo: DNE
351
trusty_linux-flo: ignored
352
utopic_linux-flo: ignored (reached end-of-life)
353
vivid_linux-flo: ignored (reached end-of-life)
354
vivid/ubuntu-core_linux-flo: DNE
355
vivid/stable-phone-overlay_linux-flo: ignored (abandoned)
356
wily_linux-flo: ignored (reached end-of-life)
357
xenial_linux-flo: ignored (abandoned)
358
yakkety_linux-flo: ignored (abandoned)
362
Patches_linux-lts-utopic:
363
upstream_linux-lts-utopic: released (4.0~rc1)
364
lucid_linux-lts-utopic: DNE
365
precise_linux-lts-utopic: DNE
366
precise/esm_linux-lts-utopic: DNE
367
trusty_linux-lts-utopic: released (3.16.0-34.45~14.04.1)
368
utopic_linux-lts-utopic: DNE
369
vivid_linux-lts-utopic: DNE
370
vivid/ubuntu-core_linux-lts-utopic: DNE
371
vivid/stable-phone-overlay_linux-lts-utopic: DNE
372
wily_linux-lts-utopic: DNE
373
xenial_linux-lts-utopic: DNE
374
yakkety_linux-lts-utopic: DNE
375
zesty_linux-lts-utopic: DNE
376
devel_linux-lts-utopic: DNE
378
Patches_linux-lts-vivid:
379
upstream_linux-lts-vivid: released (4.0~rc1)
380
lucid_linux-lts-vivid: DNE
381
precise_linux-lts-vivid: DNE
382
precise/esm_linux-lts-vivid: DNE
383
trusty_linux-lts-vivid: not-affected (3.19.0-18.18~14.04.1)
384
utopic_linux-lts-vivid: DNE
385
vivid_linux-lts-vivid: DNE
386
vivid/ubuntu-core_linux-lts-vivid: DNE
387
vivid/stable-phone-overlay_linux-lts-vivid: DNE
388
wily_linux-lts-vivid: DNE
389
xenial_linux-lts-vivid: DNE
390
yakkety_linux-lts-vivid: DNE
391
zesty_linux-lts-vivid: DNE
392
devel_linux-lts-vivid: DNE
394
Patches_linux-krillin:
395
product_linux-krillin: ignored (was needed now end-of-life)
397
Patches_linux-vegetahd:
398
product_linux-vegetahd: ignored (was needed now end-of-life)
400
Patches_linux-lts-wily:
401
upstream_linux-lts-wily: released (4.0~rc1)
402
precise_linux-lts-wily: DNE
403
precise/esm_linux-lts-wily: DNE
404
trusty_linux-lts-wily: not-affected (4.2.0-18.22~14.04.1)
405
vivid_linux-lts-wily: DNE
406
vivid/ubuntu-core_linux-lts-wily: DNE
407
vivid/stable-phone-overlay_linux-lts-wily: DNE
408
wily_linux-lts-wily: DNE
409
xenial_linux-lts-wily: DNE
410
yakkety_linux-lts-wily: DNE
411
zesty_linux-lts-wily: DNE
412
devel_linux-lts-wily: DNE
414
Patches_linux-raspi2:
415
upstream_linux-raspi2: released (4.0~rc1)
416
precise_linux-raspi2: DNE
417
precise/esm_linux-raspi2: DNE
418
trusty_linux-raspi2: DNE
419
vivid_linux-raspi2: DNE
420
vivid/ubuntu-core_linux-raspi2: released (4.2.0-1014.21)
421
vivid/stable-phone-overlay_linux-raspi2: DNE
422
wily_linux-raspi2: not-affected (4.2.0-1008.12)
423
xenial_linux-raspi2: not-affected (4.2.0-1013.19)
424
yakkety_linux-raspi2: not-affected (4.4.0-1009.10)
425
zesty_linux-raspi2: not-affected (4.8.0-1013.15)
426
devel_linux-raspi2: not-affected (4.10.0-1004.6)
428
Patches_linux-lts-xenial:
429
upstream_linux-lts-xenial: released (4.0~rc1)
430
precise_linux-lts-xenial: DNE
431
precise/esm_linux-lts-xenial: DNE
432
trusty_linux-lts-xenial: not-affected (4.4.0-13.29~14.04.1)
433
vivid_linux-lts-xenial: DNE
434
vivid/ubuntu-core_linux-lts-xenial: DNE
435
vivid/stable-phone-overlay_linux-lts-xenial: DNE
436
wily_linux-lts-xenial: DNE
437
xenial_linux-lts-xenial: DNE
438
yakkety_linux-lts-xenial: DNE
439
zesty_linux-lts-xenial: DNE
440
devel_linux-lts-xenial: DNE
442
Patches_linux-snapdragon:
443
upstream_linux-snapdragon: released (4.0~rc1)
444
precise_linux-snapdragon: DNE
445
precise/esm_linux-snapdragon: DNE
446
trusty_linux-snapdragon: DNE
447
vivid/ubuntu-core_linux-snapdragon: DNE
448
vivid/stable-phone-overlay_linux-snapdragon: DNE
449
wily_linux-snapdragon: DNE
450
xenial_linux-snapdragon: not-affected (4.4.0-1012.12)
451
yakkety_linux-snapdragon: not-affected (4.4.0-1012.12)
452
zesty_linux-snapdragon: not-affected (4.4.0-1029.32)
453
devel_linux-snapdragon: not-affected (4.4.0-1050.54)
456
upstream_linux-aws: released (4.0~rc1)
457
precise_linux-aws: DNE
458
precise/esm_linux-aws: DNE
459
trusty_linux-aws: not-affected (4.4.0-1002.2)
460
vivid/ubuntu-core_linux-aws: DNE
461
vivid/stable-phone-overlay_linux-aws: DNE
462
xenial_linux-aws: not-affected (4.4.0-1001.10)
463
yakkety_linux-aws: DNE
467
Patches_linux-hwe-edge:
468
upstream_linux-hwe-edge: released (4.0~rc1)
469
precise_linux-hwe-edge: DNE
470
precise/esm_linux-hwe-edge: DNE
471
trusty_linux-hwe-edge: DNE
472
vivid/ubuntu-core_linux-hwe-edge: DNE
473
vivid/stable-phone-overlay_linux-hwe-edge: DNE
474
xenial_linux-hwe-edge: not-affected (4.8.0-28.30~16.04.1)
475
yakkety_linux-hwe-edge: DNE
476
zesty_linux-hwe-edge: DNE
477
devel_linux-hwe-edge: DNE
480
upstream_linux-hwe: released (4.0~rc1)
481
precise_linux-hwe: DNE
482
precise/esm_linux-hwe: DNE
483
trusty_linux-hwe: DNE
484
vivid/ubuntu-core_linux-hwe: DNE
485
vivid/stable-phone-overlay_linux-hwe: DNE
486
xenial_linux-hwe: not-affected (4.8.0-36.36~16.04.1)
487
yakkety_linux-hwe: DNE
492
upstream_linux-gke: released (4.0~rc1)
493
precise_linux-gke: DNE
494
precise/esm_linux-gke: DNE
495
trusty_linux-gke: DNE
496
vivid/ubuntu-core_linux-gke: DNE
497
vivid/stable-phone-overlay_linux-gke: DNE
498
xenial_linux-gke: not-affected (4.4.0-1003.3)
499
yakkety_linux-gke: DNE