Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 10.10: USN-1361-1 Moderate: Kernel Denial of Service Vulnerabilities

ubuntu
Calendar Grey February 13, 2012
Scroller Ubuntu
Various vulnerabilities in the Linux kernel addressed in Ubuntu 10.10 improve overall system security and robustness.
Several security issues were fixed in the kernel.

Summary

Several security issues were fixed in the kernel.

Software Description:

- linux: Linux kernel

Details:

Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user

who can mount a FUSE file system could cause a denial of service.

(CVE-2011-3353)

A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual

interrupt control is not available a local user could use this to cause a

denial of service by starting a timer. (CVE-2011-4622)

A flaw was discovered in the XFS filesystem. If a local user mounts a

specially crafted XFS image it could potential execute arbitrary code on

the system. (CVE-2012-0038)

Chen Haogang discovered an integer overflow that could result in memory

corruption. A local unprivileged user could use this to crash the system.

(CVE-2012-0044)

Topics%20covered

Topics Covered

security advisory denial of service security update memory corruption ubuntu kernel issues

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.10:
  linux-image-2.6.35-32-generic   2.6.35-32.65
  linux-image-2.6.35-32-generic-pae  2.6.35-32.65
  linux-image-2.6.35-32-omap      2.6.35-32.65
  linux-image-2.6.35-32-powerpc   2.6.35-32.65
  linux-image-2.6.35-32-powerpc-smp  2.6.35-32.65
  linux-image-2.6.35-32-powerpc64-smp  2.6.35-32.65
  linux-image-2.6.35-32-server    2.6.35-32.65
  linux-image-2.6.35-32-versatile  2.6.35-32.65
  linux-image-2.6.35-32-virtual   2.6.35-32.65

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1361-1

CVE-2011-3353, CVE-2011-4622, CVE-2012-0038, CVE-2012-0044

February 13, 2012

Topics%20covered

Topics Covered

security advisory denial of service security update memory corruption ubuntu kernel issues

Package Information

https://launchpad.net/ubuntu/+source/linux/2.6.35-32.65

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.