Ubuntu 10.10 USN-1202-1 Critical: Kernel Flaws Addressed

Multiple kernel flaws have been fixed.

Software Description:

- linux-ti-omap4: Linux kernel for OMAP4

Details:

Dan Rosenberg discovered that several network ioctls did not clear kernel

memory correctly. A local user could exploit this to read kernel stack

memory, leading to a loss of privacy. (CVE-2010-3296, CVE-2010-3297)

Brad Spengler discovered that stack memory for new a process was not

correctly calculated. A local attacker could exploit this to crash the

system, leading to a denial of service. (CVE-2010-3858)

Dan Rosenberg discovered that the Linux kernel TIPC implementation

contained multiple integer signedness errors. A local attacker could

exploit this to gain root privileges. (CVE-2010-3859)

Dan Rosenberg discovered that the CAN protocol on 64bit systems did not

correctly calculate the size of certain buffers. A local attacker could

exploit this to crash the system or possibly execute arbitrary code as the

root user. (CVE-2010-3874)

Nelson ...