Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 510
Alerts This Week
Warning Icon 1 510

Ubuntu 10.10: USN-1394-1 Critical: OMAP4 Kernel Flaws and Fixes

ubuntu
Calendar Grey March 7, 2012
Scroller Ubuntu
An in-depth analysis of various OMAP4 kernel vulnerabilities resolved in Ubuntu 10.10, focusing on mitigating security risks.
Several security issues were fixed in the kernel.

Summary

Several security issues were fixed in the kernel.

Software Description:

- linux-ti-omap4: Linux kernel for OMAP4

Details:

Aristide Fattori and Roberto Paleari reported a flaw in the Linux kernel's

handling of IPv4 icmp packets. A remote user could exploit this to cause a

denial of service. (CVE-2011-1927)

Vegard Nossum discovered a leak in the kernel's inotify_init() system call.

A local, unprivileged user could exploit this to cause a denial of service.

(CVE-2010-4250)

An error was discovered in the kernel's handling of CUSE (Character device

in Userspace). A local attacker might exploit this flaw to escalate

privilege, if access to /dev/cuse has been modified to allow non-root

users. (CVE-2010-4650)

A flaw was found in the kernel's Integrity Measurement Architecture (IMA).

Changes made by an attacker might not be discovered by IMA, if SELinux was

disabled, and a new IMA rule was loaded. (CVE-2011-0006)

A flaw was found in the Linux Ethernet bridge'...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service critical privilege escalation Ubuntu kernel OMAP4

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.10:
  linux-image-2.6.35-903-omap4    2.6.35-903.32

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1394-1

CVE-2010-4250, CVE-2010-4650, CVE-2011-0006, CVE-2011-0716,

CVE-2011-1476, CVE-2011-1477, CVE-2011-1759, CVE-2011-1927,

CVE-2011-2182, CVE-2011-3619, CVE-2011-4621, CVE-2012-0038,

CVE-2012-0044

Severity
critical
Lowest
Low
Medium
High
Critical

March 07, 2012

Topics%20covered

Topics Covered

security advisory denial of service critical privilege escalation Ubuntu kernel OMAP4

Package Information

https://launchpad.net/ubuntu/+source/linux-ti-omap4/2.6.35-903.32

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.