Launchpad.net

CVE 2014-0100

Race condition in the inet_frag_intern function in net/ipv4/inet_fragment.c in the Linux kernel through 3.13.6 allows remote attackers to cause a denial of service (use-after-free error) or possibly have unspecified other impact via a large series of fragmented ICMP Echo Request packets to a system with a heavy CPU load.

Related bugs and status

CVE-2014-0100 (Candidate) is related to these bugs:

Bug #1287398: hyper-v: frame buffer driver not loading in Generation 2 mode

Summary				In	Importance	Status
	1287398	hyper-v: frame buffer driver not loading in Generation 2 mode		linux (Ubuntu)	High	Fix Released

Bug #1290151: hyper-v: Hyper-V network broken for Trusty on Server 2008R2

Summary				In	Importance	Status
	1290151	hyper-v: Hyper-V network broken for Trusty on Server 2008R2		linux (Ubuntu)	High	Fix Released

Bug #1291890: Add Lenovo ThinkPad OneLink GigaLAN USB ID to ax88179 driver

Summary				In	Importance	Status
	1291890	Add Lenovo ThinkPad OneLink GigaLAN USB ID to ax88179 driver		linux (Ubuntu)	Medium	Fix Released
	1291890	Add Lenovo ThinkPad OneLink GigaLAN USB ID to ax88179 driver		linux (Ubuntu Trusty)	Medium	Fix Released

Bug #1292216: hyper-v: Hyper-V drivers missing from UEFI based installer

		In	Importance	Status
1292216	hyper-v: Hyper-V drivers missing from UEFI based installer	linux (Ubuntu)	High	Fix Released
1292216	hyper-v: Hyper-V drivers missing from UEFI based installer	linux (Ubuntu Trusty)	High	Fix Released
1292216	hyper-v: Hyper-V drivers missing from UEFI based installer	debian-installer (Ubuntu)	High	Fix Released
1292216	hyper-v: Hyper-V drivers missing from UEFI based installer	debian-installer (Ubuntu Trusty)	High	Fix Released

Bug #1293361: xHCI regression(mass storage devices fail) in stable 3.13.5(14.04)

Summary				In	Importance	Status
	1293361	xHCI regression(mass storage devices fail) in stable 3.13.5(14.04)		linux (Ubuntu)	Critical	Fix Released
	1293361	xHCI regression(mass storage devices fail) in stable 3.13.5(14.04)		linux (Ubuntu Trusty)	Critical	Fix Released

Bug #1293713: CVE-2014-0100

		In	Importance	Status
1293713	CVE-2014-0100	linux (Ubuntu)	Medium	Invalid
1293713	CVE-2014-0100	linux-fsl-imx51 (Ubuntu)	Medium	Invalid
1293713	CVE-2014-0100	linux-mvl-dove (Ubuntu)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-backport-maverick (Ubuntu)	Undecided	Won't Fix
1293713	CVE-2014-0100	linux-lts-backport-natty (Ubuntu)	Undecided	Won't Fix
1293713	CVE-2014-0100	linux-ti-omap4 (Ubuntu)	Medium	Invalid
1293713	CVE-2014-0100	linux-ec2 (Ubuntu)	Medium	Invalid
1293713	CVE-2014-0100	linux (Ubuntu Trusty)	Medium	Invalid
1293713	CVE-2014-0100	linux-ec2 (Ubuntu Trusty)	Medium	Invalid
1293713	CVE-2014-0100	linux-fsl-imx51 (Ubuntu Trusty)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-backport-maverick (Ubuntu Trusty)	Undecided	Won't Fix
1293713	CVE-2014-0100	linux-lts-backport-natty (Ubuntu Trusty)	Undecided	Won't Fix
1293713	CVE-2014-0100	linux-mvl-dove (Ubuntu Trusty)	Medium	Invalid
1293713	CVE-2014-0100	linux-ti-omap4 (Ubuntu Trusty)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-backport-maverick (Ubuntu Saucy)	Undecided	Won't Fix
1293713	CVE-2014-0100	linux-lts-backport-natty (Ubuntu Saucy)	Undecided	Won't Fix
1293713	CVE-2014-0100	linux-lts-backport-maverick (Ubuntu Quantal)	Undecided	Won't Fix
1293713	CVE-2014-0100	linux-lts-backport-natty (Ubuntu Quantal)	Undecided	Won't Fix
1293713	CVE-2014-0100	linux (Ubuntu Precise)	Medium	Invalid
1293713	CVE-2014-0100	linux-ec2 (Ubuntu Precise)	Medium	Invalid
1293713	CVE-2014-0100	linux-fsl-imx51 (Ubuntu Precise)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-backport-maverick (Ubuntu Precise)	Undecided	Won't Fix
1293713	CVE-2014-0100	linux-lts-backport-natty (Ubuntu Precise)	Undecided	Won't Fix
1293713	CVE-2014-0100	linux-mvl-dove (Ubuntu Precise)	Medium	Invalid
1293713	CVE-2014-0100	linux-ti-omap4 (Ubuntu Precise)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-backport-maverick (Ubuntu Lucid)	Undecided	Won't Fix
1293713	CVE-2014-0100	linux-lts-backport-natty (Ubuntu Lucid)	Undecided	Won't Fix
1293713	CVE-2014-0100	linux-armadaxp (Ubuntu)	Medium	Invalid
1293713	CVE-2014-0100	linux-armadaxp (Ubuntu Precise)	Medium	Invalid
1293713	CVE-2014-0100	linux-armadaxp (Ubuntu Trusty)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-saucy (Ubuntu)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-saucy (Ubuntu Precise)	Medium	Fix Released
1293713	CVE-2014-0100	linux-lts-saucy (Ubuntu Trusty)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-quantal (Ubuntu)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-quantal (Ubuntu Precise)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-quantal (Ubuntu Trusty)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-raring (Ubuntu)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-raring (Ubuntu Precise)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-raring (Ubuntu Trusty)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-backport-maverick (Ubuntu Utopic)	Undecided	Won't Fix
1293713	CVE-2014-0100	linux-lts-backport-natty (Ubuntu Utopic)	Undecided	Won't Fix
1293713	CVE-2014-0100	linux-lts-trusty (Ubuntu)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-trusty (Ubuntu Precise)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-trusty (Ubuntu Trusty)	Medium	Invalid
1293713	CVE-2014-0100	linux (Ubuntu Vivid)	Medium	Invalid
1293713	CVE-2014-0100	linux-armadaxp (Ubuntu Vivid)	Medium	Invalid
1293713	CVE-2014-0100	linux-ec2 (Ubuntu Vivid)	Medium	Invalid
1293713	CVE-2014-0100	linux-fsl-imx51 (Ubuntu Vivid)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-backport-maverick (Ubuntu Vivid)	Undecided	New
1293713	CVE-2014-0100	linux-lts-backport-natty (Ubuntu Vivid)	Undecided	New
1293713	CVE-2014-0100	linux-lts-quantal (Ubuntu Vivid)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-raring (Ubuntu Vivid)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-saucy (Ubuntu Vivid)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-trusty (Ubuntu Vivid)	Medium	Invalid
1293713	CVE-2014-0100	linux-mvl-dove (Ubuntu Vivid)	Medium	Invalid
1293713	CVE-2014-0100	linux-ti-omap4 (Ubuntu Vivid)	Medium	Invalid
1293713	CVE-2014-0100	linux (Ubuntu Wily)	Medium	Invalid
1293713	CVE-2014-0100	linux-armadaxp (Ubuntu Wily)	Medium	Invalid
1293713	CVE-2014-0100	linux-ec2 (Ubuntu Wily)	Medium	Invalid
1293713	CVE-2014-0100	linux-fsl-imx51 (Ubuntu Wily)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-backport-maverick (Ubuntu Wily)	Undecided	Won't Fix
1293713	CVE-2014-0100	linux-lts-backport-natty (Ubuntu Wily)	Undecided	Won't Fix
1293713	CVE-2014-0100	linux-lts-quantal (Ubuntu Wily)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-raring (Ubuntu Wily)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-saucy (Ubuntu Wily)	Medium	Invalid
1293713	CVE-2014-0100	linux-lts-trusty (Ubuntu Wily)	Medium	Invalid
1293713	CVE-2014-0100	linux-mvl-dove (Ubuntu Wily)	Medium	Invalid
1293713	CVE-2014-0100	linux-ti-omap4 (Ubuntu Wily)	Medium	Invalid
1293713	CVE-2014-0100	linux-goldfish (Ubuntu)	Medium	Invalid
1293713	CVE-2014-0100	linux-goldfish (Ubuntu Precise)	Medium	Invalid
1293713	CVE-2014-0100	linux-goldfish (Ubuntu Trusty)	Medium	Invalid
1293713	CVE-2014-0100	linux-goldfish (Ubuntu Vivid)	Medium	Invalid
1293713	CVE-2014-0100	linux-goldfish (Ubuntu Wily)	Medium	Invalid
1293713	CVE-2014-0100	linux-flo (Ubuntu)	Medium	Invalid
1293713	CVE-2014-0100	linux-flo (Ubuntu Precise)	Medium	Invalid

Bug #1293725: linux: 3.13.0-18.38 -proposed tracker

		In	Importance	Status
1293725	linux: 3.13.0-18.38 -proposed tracker	linux (Ubuntu)	Medium	Fix Released
1293725	linux: 3.13.0-18.38 -proposed tracker	linux (Ubuntu Trusty)	Medium	Fix Released
1293725	linux: 3.13.0-18.38 -proposed tracker	Kernel Development Workflow	Medium	Fix Released
1293725	linux: 3.13.0-18.38 -proposed tracker	Kernel Development Workflow automated-testing	Medium	Fix Released
1293725	linux: 3.13.0-18.38 -proposed tracker	Kernel Development Workflow prepare-package	Medium	Fix Released
1293725	linux: 3.13.0-18.38 -proposed tracker	Kernel Development Workflow prepare-package-meta	Medium	Fix Released
1293725	linux: 3.13.0-18.38 -proposed tracker	Kernel Development Workflow prepare-package-signed	Medium	Fix Released
1293725	linux: 3.13.0-18.38 -proposed tracker	Kernel Development Workflow promote-to-release	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2014-0100

Related bugs and status

Related bugs

References