Linux Kernel Multiple Local Security Bypass Vulnerabilities

Bugtraq ID:	68162
Class:	Design Error
CVE:	CVE-2014-4654 CVE-2014-4655
Remote:	No
Local:	Yes
Published:	Jun 18 2014 12:00AM
Updated:	Apr 13 2015 09:08PM
Credit:	Lars-Peter Clausen
Vulnerable:	Ultimate PHP Board UPB 3.14.2 Ultimate PHP Board UPB 3.12.3 Ultimate PHP Board UPB 3.10.14 Ultimate PHP Board UPB 3.9.10 Ultimate PHP Board UPB 3.8.10 Ultimate PHP Board UPB 3.8.2 Ultimate PHP Board UPB 3.7.8 Ultimate PHP Board UPB 3.7.5 Ultimate PHP Board UPB 3.7.1 Ultimate PHP Board UPB 3.6.4 Ultimate PHP Board UPB 3.4.31 Ultimate PHP Board UPB 3.4.25 Ultimate PHP Board UPB 3.4.21 Ultimate PHP Board UPB 3.4.18 Ultimate PHP Board UPB 3.4.12 Ultimate PHP Board UPB 3.4.10 Ultimate PHP Board UPB 3.3.4 Ultimate PHP Board UPB 3.2.28 Ultimate PHP Board UPB 3.2.23 Ultimate PHP Board UPB 3.2.20 Ultimate PHP Board UPB 3.2.19 Ultimate PHP Board UPB 3.2.14 Ultimate PHP Board UPB 3.0.65 Ultimate PHP Board UPB 3.0.59 Ultimate PHP Board UPB 3.0.58 Ultimate PHP Board UPB 3.0.55 Ultimate PHP Board UPB 3.0.48 Ultimate PHP Board UPB 3.0.37 Ultimate PHP Board UPB 3.0.34 Ultimate PHP Board UPB 3.0.31 Ultimate PHP Board UPB 3.0.30 Ultimate PHP Board UPB 3.0.25 Ultimate PHP Board UPB 3.9.8 Ultimate PHP Board UPB 3.9.7 Ultimate PHP Board UPB 3.9.5 Ultimate PHP Board UPB 3.9.4 Ultimate PHP Board UPB 3.9.2 Ultimate PHP Board UPB 3.9 Rc7 Ultimate PHP Board UPB 3.9 Rc3 Ultimate PHP Board UPB 3.9 Rc2 Ultimate PHP Board UPB 3.8.9 Ultimate PHP Board UPB 3.7.6 Ultimate PHP Board UPB 3.6.5 Ultimate PHP Board UPB 3.6.2 Ultimate PHP Board UPB 3.6.1 Ultimate PHP Board UPB 3.5.5 Ultimate PHP Board UPB 3.4.6 Ultimate PHP Board UPB 3.4.5 Ultimate PHP Board UPB 3.4.22 Ultimate PHP Board UPB 3.4.16 Ultimate PHP Board UPB 3.4 Rc7 Ultimate PHP Board UPB 3.3.7 Ultimate PHP Board UPB 3.3.2 Ultimate PHP Board UPB 3.3.1 Ultimate PHP Board UPB 3.3 Rc7 Ultimate PHP Board UPB 3.3 Rc5 Ultimate PHP Board UPB 3.3 Rc4 Ultimate PHP Board UPB 3.3 Ultimate PHP Board UPB 3.2.8 Ultimate PHP Board UPB 3.2.7 Ultimate PHP Board UPB 3.2.4 Ultimate PHP Board UPB 3.2.29 Ultimate PHP Board UPB 3.2.15 Ultimate PHP Board UPB 3.2.12 Ultimate PHP Board UPB 3.2.11 Ultimate PHP Board UPB 3.2.10 Ultimate PHP Board UPB 3.2.1 Ultimate PHP Board UPB 3.2 Rc6 Ultimate PHP Board UPB 3.2 Rc3 Ultimate PHP Board UPB 3.15.1 Ultimate PHP Board UPB 3.12 Ultimate PHP Board UPB 3.11.9 Ultimate PHP Board UPB 3.11.5 Ultimate PHP Board UPB 3.11.4 Ultimate PHP Board UPB 3.11.2 Ultimate PHP Board UPB 3.11.10 Ultimate PHP Board UPB 3.10.8 Ultimate PHP Board UPB 3.10.6 Ultimate PHP Board UPB 3.10.5 Ultimate PHP Board UPB 3.10.22 Ultimate PHP Board UPB 3.10.20 Ultimate PHP Board UPB 3.10.13 Ultimate PHP Board UPB 3.1.9 Ultimate PHP Board UPB 3.1.4 Ultimate PHP Board UPB 3.1.1 Ultimate PHP Board UPB 3.1 Rc3 Ultimate PHP Board UPB 3.1 Rc2 Ultimate PHP Board UPB 3.0.6 Ultimate PHP Board UPB 3.0.56 Ultimate PHP Board UPB 3.0.54 Ultimate PHP Board UPB 3.0.5 Ultimate PHP Board UPB 3.0.46 Ultimate PHP Board UPB 3.0.44 Ultimate PHP Board UPB 3.0.43 Ultimate PHP Board UPB 3.0.40 Ultimate PHP Board UPB 3.0.28 Ultimate PHP Board UPB 3.0.27 Ultimate PHP Board UPB 3.0.22 Ultimate PHP Board UPB 3.0.20 Ultimate PHP Board UPB 3.0.17 Ultimate PHP Board UPB 3.0.16 Ultimate PHP Board UPB 3.0.14 Ultimate PHP Board UPB 3.0.12 Ultimate PHP Board UPB 3.0.1 Ultimate PHP Board UPB 3.0 Rc5 Ultimate PHP Board UPB 3.0 Rc3 Ubuntu Ubuntu Linux 14.04 LTS Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Thomas Lange Fully Automated Installation 3.14.4 Thomas Lange Fully Automated Installation 3.13.9 Thomas Lange Fully Automated Installation 3.13.2 Thomas Lange Fully Automated Installation 3.12.16 Thomas Lange Fully Automated Installation 3.12.11 Thomas Lange Fully Automated Installation 3.12.10 Thomas Lange Fully Automated Installation 3.12.7 Thomas Lange Fully Automated Installation 3.12.5 Thomas Lange Fully Automated Installation 3.12.4 Thomas Lange Fully Automated Installation 3.10.26 Thomas Lange Fully Automated Installation 3.10.21 Thomas Lange Fully Automated Installation 3.10.10 Thomas Lange Fully Automated Installation 3.10.9 Thomas Lange Fully Automated Installation 3.10.4 Thomas Lange Fully Automated Installation 3.9.11 Thomas Lange Fully Automated Installation 3.9 Thomas Lange Fully Automated Installation 3.8.8 Thomas Lange Fully Automated Installation 3.7.7 Thomas Lange Fully Automated Installation 3.7.4 Thomas Lange Fully Automated Installation 3.4.76 Thomas Lange Fully Automated Installation 3.4.72 Thomas Lange Fully Automated Installation 3.4.64 Thomas Lange Fully Automated Installation 3.4.58 Thomas Lange Fully Automated Installation 3.4.42 Thomas Lange Fully Automated Installation 3.4.36 Thomas Lange Fully Automated Installation 3.4.32 Thomas Lange Fully Automated Installation 3.4.30 Thomas Lange Fully Automated Installation 3.4.26 Thomas Lange Fully Automated Installation 3.4.24 Thomas Lange Fully Automated Installation 3.4.20 Thomas Lange Fully Automated Installation 3.3.5 Thomas Lange Fully Automated Installation 3.2.25 Thomas Lange Fully Automated Installation 3.2.24 Thomas Lange Fully Automated Installation 3.2.22 Thomas Lange Fully Automated Installation 3.2.21 Thomas Lange Fully Automated Installation 3.2.13 Thomas Lange Fully Automated Installation 3.1.2 Thomas Lange Fully Automated Installation 3.0.60 Thomas Lange Fully Automated Installation 3.0.45 Thomas Lange Fully Automated Installation 3.0.36 Thomas Lange Fully Automated Installation 3.0.29 Thomas Lange Fully Automated Installation 3.0.26 Thomas Lange Fully Automated Installation 3.9 Rc1 Thomas Lange Fully Automated Installation 3.8.7 Thomas Lange Fully Automated Installation 3.8.4 Thomas Lange Fully Automated Installation 3.8.13 Thomas Lange Fully Automated Installation 3.8.12 Thomas Lange Fully Automated Installation 3.8.0 Thomas Lange Fully Automated Installation 3.7.3 Thomas Lange Fully Automated Installation 3.6.8 Thomas Lange Fully Automated Installation 3.6.6 Thomas Lange Fully Automated Installation 3.6.3 Thomas Lange Fully Automated Installation 3.6.11 Thomas Lange Fully Automated Installation 3.5.4 Thomas Lange Fully Automated Installation 3.5.3 Thomas Lange Fully Automated Installation 3.5.1 Thomas Lange Fully Automated Installation 3.4.78 Thomas Lange Fully Automated Installation 3.4.70 Thomas Lange Fully Automated Installation 3.4.7 Thomas Lange Fully Automated Installation 3.4.68 Thomas Lange Fully Automated Installation 3.4.66 Thomas Lange Fully Automated Installation 3.4.62 Thomas Lange Fully Automated Installation 3.4.60 Thomas Lange Fully Automated Installation 3.4.56 Thomas Lange Fully Automated Installation 3.4.54 Thomas Lange Fully Automated Installation 3.4.52 Thomas Lange Fully Automated Installation 3.4.50 Thomas Lange Fully Automated Installation 3.4.48 Thomas Lange Fully Automated Installation 3.4.46 Thomas Lange Fully Automated Installation 3.4.44 Thomas Lange Fully Automated Installation 3.4.40 Thomas Lange Fully Automated Installation 3.4.38 Thomas Lange Fully Automated Installation 3.4.34 Thomas Lange Fully Automated Installation 3.4.23 Thomas Lange Fully Automated Installation 3.4.2 Thomas Lange Fully Automated Installation 3.4.17 Thomas Lange Fully Automated Installation 3.4 Rc4 Thomas Lange Fully Automated Installation 3.4 Rc3 Thomas Lange Fully Automated Installation 3.2.9 Thomas Lange Fully Automated Installation 3.2.6 Thomas Lange Fully Automated Installation 3.2.16 Thomas Lange Fully Automated Installation 3.2 Rc4 Thomas Lange Fully Automated Installation 3.14 Rc7 Thomas Lange Fully Automated Installation 3.14 Rc5 Thomas Lange Fully Automated Installation 3.14 Rc3 Thomas Lange Fully Automated Installation 3.14 Rc1 Thomas Lange Fully Automated Installation 3.13.4 Thomas Lange Fully Automated Installation 3.13.10 Thomas Lange Fully Automated Installation 3.13 Thomas Lange Fully Automated Installation 3.12.2 Thomas Lange Fully Automated Installation 3.12.14 Thomas Lange Fully Automated Installation 3.12.13 Thomas Lange Fully Automated Installation 3.11.8 Thomas Lange Fully Automated Installation 3.11.6 Thomas Lange Fully Automated Installation 3.10.28 Thomas Lange Fully Automated Installation 3.10.23 Thomas Lange Fully Automated Installation 3.10.19 Thomas Lange Fully Automated Installation 3.1.6 Thomas Lange Fully Automated Installation 3.1.3 Thomas Lange Fully Automated Installation 3.0.68 Thomas Lange Fully Automated Installation 3.0.52 Thomas Lange Fully Automated Installation 3.0.47 Thomas Lange Fully Automated Installation 3.0.42 Thomas Lange Fully Automated Installation 3.0.4 Thomas Lange Fully Automated Installation 3.0.39 Thomas Lange Fully Automated Installation 3.0.2 Thomas Lange Fully Automated Installation 3.0.18 Thomas Lange Fully Automated Installation 3.0.15 Thomas Lange Fully Automated Installation 3.0.13 Thomas Lange Fully Automated Installation 3.0.11 Thomas Lange Fully Automated Installation 3.0.10 Thomas Lange Fully Automated Installation 3.0 Rc6 SuSE SUSE Linux Enterprise Server Unsupported Extras 11 SuSE SUSE Linux Enterprise Server 11 SP3 for VMware SuSE SUSE Linux Enterprise Server 11 SP3 SuSE SUSE Linux Enterprise Server 11 SP1 LTSS SuSE SUSE Linux Enterprise High Availability Extension 11 SP3 SuSE Suse Linux Enterprise Desktop 11 SP3 SuSE Linux Enterprise Real Time Extension 11 SP3 S.u.S.E. openSUSE 13.1 S.u.S.E. openSUSE 12.3 Redhat MRG Realtime for RHEL 6 Server 2 Redhat Enterprise Linux Workstation Optional 7 Redhat Enterprise Linux Workstation Optional 6 Redhat Enterprise Linux Workstation 7 Redhat Enterprise Linux Workstation 6 Redhat Enterprise Linux Server Optional 7 Redhat Enterprise Linux Server Optional 6 Redhat Enterprise Linux Server 7 Redhat Enterprise Linux Server 6 Redhat Enterprise Linux HPC Node Optional 6 Redhat Enterprise Linux HPC Node 6 Redhat Enterprise Linux Desktop Optional 6 Redhat Enterprise Linux Desktop 6 Redhat Enterprise Linux ComputeNode Optional 7 Redhat Enterprise Linux ComputeNode 7 Redhat Enterprise Linux Client Optional 7 Redhat Enterprise Linux Client 7 Oracle Linux 7 Oracle Linux 6 Oracle Enterprise Linux 7 Oracle Enterprise Linux 6.2 Oracle Enterprise Linux 6 Mandriva Business Server 1 X86 64 Mandriva Business Server 1 Linux Linux Kernel 3.14.3 Linux Linux Kernel 3.13.7 Linux Linux Kernel 3.13.6 Linux Linux Kernel 3.13.5 Linux Linux Kernel 3.13.1 Linux Linux Kernel 3.12.8 Linux Linux Kernel 3.11.3 Linux Linux Kernel 3.11.1 Linux Linux Kernel 3.10.27 Linux Linux Kernel 3.10.7 Linux Linux Kernel 3.10.3 Linux Linux Kernel 3.10.2 Linux Linux Kernel 3.9.9 Linux Linux Kernel 3.8.11 Linux Linux Kernel 3.8.6 Linux Linux Kernel 3.7.10 Linux Linux Kernel 3.4.74 Linux Linux Kernel 3.4.73 Linux Linux Kernel 3.4.71 Linux Linux Kernel 3.4.59 Linux Linux Kernel 3.4.28 Linux Linux Kernel 3.4.27 Linux Linux Kernel 3.4.19 Linux Linux Kernel 3.4.15 Linux Linux Kernel 3.4.14 Linux Linux Kernel 3.4.13 Linux Linux Kernel 3.4.11 Linux Linux Kernel 3.3.8 Linux Linux Kernel 3.2.30 Linux Linux Kernel 3.2.27 Linux Linux Kernel 3.2.26 Linux Linux Kernel 3.2.18 Linux Linux Kernel 3.2.17 Linux Linux Kernel 3.1.4 Linux Linux Kernel 3.0.61 Linux Linux Kernel 3.0.41 Linux Linux Kernel 3.0.35 Linux Linux Kernel 3.0.33 Linux Linux Kernel 3.0.32 Linux Linux Kernel 3.0.24 Linux Linux Kernel 3.0.23 Linux Linux Kernel 3.9.6 Linux Linux Kernel 3.9.3 Linux Linux Kernel 3.9.1 Linux Linux Kernel 3.9 Rc6 Linux Linux Kernel 3.9 Rc5 Linux Linux Kernel 3.9 Rc4 Linux Linux Kernel 3.8.5 Linux Linux Kernel 3.8.3 Linux Linux Kernel 3.8.1 Linux Linux Kernel 3.7.9 Linux Linux Kernel 3.7.2 Linux Linux Kernel 3.7 Linux Linux Kernel 3.6.9 Linux Linux Kernel 3.6.7 Linux Linux Kernel 3.6.10 Linux Linux Kernel 3.6 Linux Linux Kernel 3.5.7 Linux Linux Kernel 3.5.6 Linux Linux Kernel 3.5.2 Linux Linux Kernel 3.4.9 Linux Linux Kernel 3.4.8 Linux Linux Kernel 3.4.79 Linux Linux Kernel 3.4.77 Linux Linux Kernel 3.4.75 Linux Linux Kernel 3.4.69 Linux Linux Kernel 3.4.67 Linux Linux Kernel 3.4.65 Linux Linux Kernel 3.4.63 Linux Linux Kernel 3.4.61 Linux Linux Kernel 3.4.57 Linux Linux Kernel 3.4.55 Linux Linux Kernel 3.4.53 Linux Linux Kernel 3.4.51 Linux Linux Kernel 3.4.49 Linux Linux Kernel 3.4.47 Linux Linux Kernel 3.4.45 Linux Linux Kernel 3.4.43 Linux Linux Kernel 3.4.41 Linux Linux Kernel 3.4.4 Linux Linux Kernel 3.4.39 Linux Linux Kernel 3.4.37 Linux Linux Kernel 3.4.35 Linux Linux Kernel 3.4.33 Linux Linux Kernel 3.4.3 Linux Linux Kernel 3.4.29 Linux Linux Kernel 3.4.1 Linux Linux Kernel 3.4 Rc6 Linux Linux Kernel 3.4 Rc5 Linux Linux Kernel 3.4 Rc2 Linux Linux Kernel 3.4 Rc1 Linux Linux Kernel 3.4 Linux Linux Kernel 3.3.6 Linux Linux Kernel 3.3.3 Linux Linux Kernel 3.3 Rc6 Linux Linux Kernel 3.3 Rc3 Linux Linux Kernel 3.3 Rc2 Linux Linux Kernel 3.3 Rc1 Linux Linux Kernel 3.2.5 Linux Linux Kernel 3.2.3 Linux Linux Kernel 3.2.2 Linux Linux Kernel 3.2 Rc7 Linux Linux Kernel 3.2 Rc5 Linux Linux Kernel 3.2 Rc2 Linux Linux Kernel 3.2 Linux Linux Kernel 3.15 Linux Linux Kernel 3.14.5 Linux Linux Kernel 3.14.1 Linux Linux Kernel 3.14 Rc8 Linux Linux Kernel 3.14 Rc6 Linux Linux Kernel 3.14 Rc4 Linux Linux Kernel 3.14 Rc2 Linux Linux Kernel 3.14 - Linux Linux Kernel 3.13.8 Linux Linux Kernel 3.13.3 Linux Linux Kernel 3.13.11 Linux Linux Kernel 3.12.9 Linux Linux Kernel 3.12.6 Linux Linux Kernel 3.12.17 Linux Linux Kernel 3.12.15 Linux Linux Kernel 3.12.12 Linux Linux Kernel 3.12.1 Linux Linux Kernel 3.11.7 Linux Linux Kernel 3.11 Linux Linux Kernel 3.10.29 Linux Linux Kernel 3.10.25 Linux Linux Kernel 3.10.24 Linux Linux Kernel 3.10.18 Linux Linux Kernel 3.10.17 Linux Linux Kernel 3.10.16 Linux Linux Kernel 3.10.15 Linux Linux Kernel 3.10.12 Linux Linux Kernel 3.10.11 Linux Linux Kernel 3.10.1 Linux Linux Kernel 3.10 Linux Linux Kernel 3.1.8 Linux Linux Kernel 3.1.7 Linux Linux Kernel 3.1.5 Linux Linux Kernel 3.1.10 Linux Linux Kernel 3.1 Rc4 Linux Linux Kernel 3.1 Rc1 Linux Linux Kernel 3.0.9 Linux Linux Kernel 3.0.8 Linux Linux Kernel 3.0.7 Linux Linux Kernel 3.0.67 Linux Linux Kernel 3.0.66 Linux Linux Kernel 3.0.64 Linux Linux Kernel 3.0.63 Linux Linux Kernel 3.0.62 Linux Linux Kernel 3.0.57 Linux Linux Kernel 3.0.53 Linux Linux Kernel 3.0.51 Linux Linux Kernel 3.0.50 Linux Linux Kernel 3.0.49 Linux Linux Kernel 3.0.38 Linux Linux Kernel 3.0.3 Linux Linux Kernel 3.0.21 Linux Linux Kernel 3.0.19 Linux Linux Kernel 3.0 Rc7 Linux Linux Kernel 3.0 Rc4 Linux Linux Kernel 3.0 Rc2 Linux Linux Kernel 3.0 Rc1 Linux kernel IBM PowerKVM 2.1 CentOS CentOS 7
Not Vulnerable:

Linux Kernel Multiple Local Security Bypass Vulnerabilities

An attacker can exploit this issue through readily available tools.

Linux Kernel Multiple Local Security Bypass Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Linux Kernel Multiple Local Security Bypass Vulnerabilities

References:

• ALSA: control: Fix replacing user controls (Kernel)
  
• Linux kernel Homepage (kernel.org)
  
• openSUSE Security Update: kernel: security and bugfix update (SUSE)
  
• Security Bulletin: PowerKVM Kernel Vulnerabilities - Multiple CVEs (IBM)