Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

Ubuntu 10.04 LTS USN-1468-1 Critical: Kernel Memory Flaw Impact

ubuntu
Calendar Grey June 12, 2012
Scroller Ubuntu
Debian Security Advisory DSA-1234-1 highlights a vulnerability in the kernel that permits illegal access to the system. Essential patches are ready for Debian 9.
The system could be made to crash or run programs as an administrator.

Summary

The system could be made to crash or run programs as an administrator.

Software Description:

- linux: Linux kernel

Details:

Schacher Raindel discovered a flaw in the Linux kernel's memory handling

when hugetlb is enabled. An unprivileged local attacker could exploit this

flaw to cause a denial of service and potentially gain higher privileges.

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.04 LTS:
  linux-image-2.6.32-41-386       2.6.32-41.90
  linux-image-2.6.32-41-generic   2.6.32-41.90
  linux-image-2.6.32-41-generic-pae  2.6.32-41.90
  linux-image-2.6.32-41-ia64      2.6.32-41.90
  linux-image-2.6.32-41-lpia      2.6.32-41.90
  linux-image-2.6.32-41-powerpc   2.6.32-41.90
  linux-image-2.6.32-41-powerpc-smp  2.6.32-41.90
  linux-image-2.6.32-41-powerpc64-smp  2.6.32-41.90
  linux-image-2.6.32-41-preempt   2.6.32-41.90
  linux-image-2.6.32-41-server    2.6.32-41.90
  linux-image-2.6.32-41-sparc64   2.6.32-41.90
  linux-image-2.6.32-41-sparc64-smp  2.6.32-41.90
  linux-image-2.6.32-41-versatile  2.6.32-41.90
  linux-image-2.6.32-41-virtual   2.6.32-41.90

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1468-1

CVE-2012-2133

Severity
critical
Lowest
Low
Medium
High
Critical

June 12, 2012

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.