Launchpad.net

CVE 2015-1333

Memory leak in the __key_link_end function in security/keys/keyring.c in the Linux kernel before 4.1.4 allows local users to cause a denial of service (memory consumption) via many add_key system calls that refer to existing keys.

Related bugs and status

CVE-2015-1333 (Candidate) is related to these bugs:

Bug #1461620: NUMA task migration race condition due to stop task not being checked when balancing happens

		In	Importance	Status
1461620	NUMA task migration race condition due to stop task not being checked when balancing happens	linux (Ubuntu)	Undecided	Fix Released
1461620	NUMA task migration race condition due to stop task not being checked when balancing happens	linux (Ubuntu Trusty)	Medium	Fix Released
1461620	NUMA task migration race condition due to stop task not being checked when balancing happens	linux (Ubuntu Vivid)	Undecided	Fix Released

Bug #1470091: update for V3 kernel bits and improved multiple fan slice support

		In	Importance	Status
1470091	update for V3 kernel bits and improved multiple fan slice support	ubuntu-fan (Ubuntu)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	iproute2 (Ubuntu)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	linux (Ubuntu)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	iproute2 (Ubuntu Wily)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	linux (Ubuntu Wily)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	ubuntu-fan (Ubuntu Wily)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	iproute2 (Ubuntu Vivid)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	linux (Ubuntu Vivid)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	ubuntu-fan (Ubuntu Vivid)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	iproute2 (Ubuntu Trusty)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	linux (Ubuntu Trusty)	High	New
1470091	update for V3 kernel bits and improved multiple fan slice support	ubuntu-fan (Ubuntu Trusty)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	linux-lts-vivid (Ubuntu Trusty)	High	Fix Released
1470091	update for V3 kernel bits and improved multiple fan slice support	linux-lts-utopic (Ubuntu Trusty)	High	New

Bug #1477250: linux: 3.19.0-24.25 -proposed tracker

		In	Importance	Status
1477250	linux: 3.19.0-24.25 -proposed tracker	linux (Ubuntu)	Undecided	Invalid
1477250	linux: 3.19.0-24.25 -proposed tracker	linux (Ubuntu Vivid)	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow certification-testing	Medium	Invalid
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow automated-testing	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow prepare-package	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow prepare-package-meta	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow prepare-package-signed	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow promote-to-proposed	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow promote-to-security	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow promote-to-updates	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow regression-testing	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow security-signoff	Medium	Fix Released
1477250	linux: 3.19.0-24.25 -proposed tracker	Kernel SRU Workflow verification-testing	Medium	Fix Released

Bug #1477790: CVE-2015-1333

		In	Importance	Status
1477790	CVE-2015-1333	linux (Ubuntu)	Medium	Invalid
1477790	CVE-2015-1333	linux-fsl-imx51 (Ubuntu)	Medium	Invalid
1477790	CVE-2015-1333	linux-mvl-dove (Ubuntu)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-backport-maverick (Ubuntu)	Undecided	New
1477790	CVE-2015-1333	linux-lts-backport-natty (Ubuntu)	Undecided	New
1477790	CVE-2015-1333	linux-ti-omap4 (Ubuntu)	Medium	Invalid
1477790	CVE-2015-1333	linux-ec2 (Ubuntu)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-trusty (Ubuntu)	Medium	Invalid
1477790	CVE-2015-1333	linux-armadaxp (Ubuntu)	Medium	Invalid
1477790	CVE-2015-1333	linux-goldfish (Ubuntu)	Medium	New
1477790	CVE-2015-1333	linux-lts-saucy (Ubuntu)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-quantal (Ubuntu)	Medium	Invalid
1477790	CVE-2015-1333	linux-flo (Ubuntu)	Medium	New
1477790	CVE-2015-1333	linux-lts-vivid (Ubuntu)	Medium	Invalid
1477790	CVE-2015-1333	linux-mako (Ubuntu)	Medium	New
1477790	CVE-2015-1333	linux-lts-utopic (Ubuntu)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-raring (Ubuntu)	Medium	Invalid
1477790	CVE-2015-1333	linux-manta (Ubuntu)	Medium	Invalid
1477790	CVE-2015-1333	linux (Ubuntu Precise)	Medium	Invalid
1477790	CVE-2015-1333	linux-armadaxp (Ubuntu Precise)	Medium	Invalid
1477790	CVE-2015-1333	linux-ec2 (Ubuntu Precise)	Medium	Invalid
1477790	CVE-2015-1333	linux-flo (Ubuntu Precise)	Medium	Invalid
1477790	CVE-2015-1333	linux-fsl-imx51 (Ubuntu Precise)	Medium	Invalid
1477790	CVE-2015-1333	linux-goldfish (Ubuntu Precise)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-backport-maverick (Ubuntu Precise)	Undecided	Won't Fix
1477790	CVE-2015-1333	linux-lts-backport-natty (Ubuntu Precise)	Undecided	Won't Fix
1477790	CVE-2015-1333	linux-lts-quantal (Ubuntu Precise)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-raring (Ubuntu Precise)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-saucy (Ubuntu Precise)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-trusty (Ubuntu Precise)	Medium	Fix Released
1477790	CVE-2015-1333	linux-lts-utopic (Ubuntu Precise)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-vivid (Ubuntu Precise)	Medium	Invalid
1477790	CVE-2015-1333	linux-mako (Ubuntu Precise)	Medium	Invalid
1477790	CVE-2015-1333	linux-manta (Ubuntu Precise)	Medium	Invalid
1477790	CVE-2015-1333	linux-mvl-dove (Ubuntu Precise)	Medium	Invalid
1477790	CVE-2015-1333	linux-ti-omap4 (Ubuntu Precise)	Medium	Invalid
1477790	CVE-2015-1333	linux (Ubuntu Trusty)	Medium	Fix Released
1477790	CVE-2015-1333	linux-armadaxp (Ubuntu Trusty)	Medium	Invalid
1477790	CVE-2015-1333	linux-ec2 (Ubuntu Trusty)	Medium	Invalid
1477790	CVE-2015-1333	linux-flo (Ubuntu Trusty)	Medium	Invalid
1477790	CVE-2015-1333	linux-fsl-imx51 (Ubuntu Trusty)	Medium	Invalid
1477790	CVE-2015-1333	linux-goldfish (Ubuntu Trusty)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-backport-maverick (Ubuntu Trusty)	Undecided	New
1477790	CVE-2015-1333	linux-lts-backport-natty (Ubuntu Trusty)	Undecided	New
1477790	CVE-2015-1333	linux-lts-quantal (Ubuntu Trusty)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-raring (Ubuntu Trusty)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-saucy (Ubuntu Trusty)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-trusty (Ubuntu Trusty)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-utopic (Ubuntu Trusty)	Medium	Fix Released
1477790	CVE-2015-1333	linux-lts-vivid (Ubuntu Trusty)	Medium	Fix Released
1477790	CVE-2015-1333	linux-mako (Ubuntu Trusty)	Medium	Invalid
1477790	CVE-2015-1333	linux-manta (Ubuntu Trusty)	Medium	Invalid
1477790	CVE-2015-1333	linux-mvl-dove (Ubuntu Trusty)	Medium	Invalid
1477790	CVE-2015-1333	linux-ti-omap4 (Ubuntu Trusty)	Medium	Invalid
1477790	CVE-2015-1333	linux (Ubuntu Vivid)	Medium	Fix Released
1477790	CVE-2015-1333	linux-armadaxp (Ubuntu Vivid)	Medium	Invalid
1477790	CVE-2015-1333	linux-ec2 (Ubuntu Vivid)	Medium	Invalid
1477790	CVE-2015-1333	linux-flo (Ubuntu Vivid)	Medium	Invalid
1477790	CVE-2015-1333	linux-fsl-imx51 (Ubuntu Vivid)	Medium	Invalid
1477790	CVE-2015-1333	linux-goldfish (Ubuntu Vivid)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-backport-maverick (Ubuntu Vivid)	Undecided	New
1477790	CVE-2015-1333	linux-lts-backport-natty (Ubuntu Vivid)	Undecided	New
1477790	CVE-2015-1333	linux-lts-quantal (Ubuntu Vivid)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-raring (Ubuntu Vivid)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-saucy (Ubuntu Vivid)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-trusty (Ubuntu Vivid)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-utopic (Ubuntu Vivid)	Medium	Invalid
1477790	CVE-2015-1333	linux-lts-vivid (Ubuntu Vivid)	Medium	Invalid
1477790	CVE-2015-1333	linux-mako (Ubuntu Vivid)	Medium	Invalid
1477790	CVE-2015-1333	linux-manta (Ubuntu Vivid)	Medium	Invalid
1477790	CVE-2015-1333	linux-mvl-dove (Ubuntu Vivid)	Medium	Invalid
1477790	CVE-2015-1333	linux-ti-omap4 (Ubuntu Vivid)	Medium	Invalid
1477790	CVE-2015-1333	linux (Ubuntu Wily)	Medium	Invalid
1477790	CVE-2015-1333	linux-armadaxp (Ubuntu Wily)	Medium	Invalid
1477790	CVE-2015-1333	linux-ec2 (Ubuntu Wily)	Medium	Invalid

Bug #1478578: "overlay" fs type not mountable in unprivileged containers

Summary				In	Importance	Status
	1478578	"overlay" fs type not mountable in unprivileged containers		linux (Ubuntu)	High	Fix Released

Bug #1478897: linux: 4.1.0-3.3 -proposed tracker

		In	Importance	Status
1478897	linux: 4.1.0-3.3 -proposed tracker	linux (Ubuntu)	Medium	Fix Released
1478897	linux: 4.1.0-3.3 -proposed tracker	linux (Ubuntu Wily)	Medium	Fix Released
1478897	linux: 4.1.0-3.3 -proposed tracker	Kernel Development Workflow	Medium	Fix Released
1478897	linux: 4.1.0-3.3 -proposed tracker	Kernel Development Workflow automated-testing	Medium	Fix Released
1478897	linux: 4.1.0-3.3 -proposed tracker	Kernel Development Workflow prepare-package	Medium	Fix Released
1478897	linux: 4.1.0-3.3 -proposed tracker	Kernel Development Workflow prepare-package-meta	Medium	Fix Released
1478897	linux: 4.1.0-3.3 -proposed tracker	Kernel Development Workflow prepare-package-signed	Medium	Fix Released
1478897	linux: 4.1.0-3.3 -proposed tracker	Kernel Development Workflow promote-to-proposed	Medium	Fix Released
1478897	linux: 4.1.0-3.3 -proposed tracker	Kernel Development Workflow promote-to-release	Medium	Fix Released

See the

CVE page on Mitre.org for more details.

Launchpad.net

CVE 2015-1333

Related bugs and status

Related bugs

References