Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 523
Alerts This Week
Warning Icon 1 523

Ubuntu 11.10 USN-1330-1 Critical: Linux Kernel OMAP4 Threats

ubuntu
Calendar Grey January 13, 2012
Scroller Ubuntu
Multiple kernel vulnerabilities addressed in Ubuntu 11.10 that may result in service interruption or elevation of privileges.
Several security issues were fixed in the kernel.

Summary

Several security issues were fixed in the kernel.

Software Description:

- linux-ti-omap4: Linux kernel for OMAP4

Details:

Clement Lecigne discovered a bug in the HFS filesystem. A local attacker

could exploit this to cause a kernel oops. (CVE-2011-2203)

A bug was discovered in the XFS filesystem's handling of pathnames. A local

attacker could exploit this to crash the system, leading to a denial of

service, or gain root privileges. (CVE-2011-4077)

A flaw was found in how the Linux kernel handles user-defined key types. An

unprivileged local user could exploit this to crash the system.

(CVE-2011-4110)

A flaw was found in the Journaling Block Device (JBD). A local attacker

able to mount ext3 or ext4 file systems could exploit this to crash the

system, leading to a denial of service. (CVE-2011-4132)

Clement Lecigne discovered a bug in the HFS file system bounds checking.

When a malformed HFS file system is mounted a local user could crash the

system or ...

Read the Full Advisory

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  linux-image-3.0.0-1206-omap4    3.0.0-1206.15

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1330-1

CVE-2011-2203, CVE-2011-4077, CVE-2011-4110, CVE-2011-4132,

CVE-2011-4330

Severity
critical
Lowest
Low
Medium
High
Critical

January 13, 2012

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.