Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

Ubuntu 10.04 LTS USN-1470-1 Serious Linux Kernel Denial of Service Issue

ubuntu
Calendar Grey June 12, 2012
Scroller Ubuntu
Enhance your Ubuntu 10.04 operating system to address several vulnerabilities within the kernel, thereby thwarting potential denial of service threats.
Several security issues were fixed in the kernel.

Summary

Several security issues were fixed in the kernel.

Software Description:

- linux-lts-backport-natty: Linux kernel backport from Natty

Details:

Andy Adamson discovered a flaw in the Linux kernel's NFSv4 implementation.

A remote NFS server (attacker) could exploit this flaw to cause a denial of

service. (CVE-2011-4131)

A flaw was found in the Linux kernel's KVM (Kernel Virtual Machine) virtual

cpu setup. An unprivileged local user could exploit this flaw to crash the

system leading to a denial of service. (CVE-2012-1601)

A flaw was discovered in the Linux kernel's KVM (kernel virtual machine).

An administrative user in the guest OS could leverage this flaw to cause a

denial of service in the host OS. (CVE-2012-2121)

Steve Grubb reported a flaw with Linux fscaps (file system base

capabilities) when used to increase the permissions of a process. For

application on which fscaps are in use a local attacker can disable address

space randomization to make attack...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service critical ubuntu linux-lts-backport-natty

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.04 LTS:
  linux-image-2.6.38-15-generic   2.6.38-15.60~lucid1
  linux-image-2.6.38-15-generic-pae  2.6.38-15.60~lucid1
  linux-image-2.6.38-15-server    2.6.38-15.60~lucid1
  linux-image-2.6.38-15-virtual   2.6.38-15.60~lucid1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1470-1

CVE-2011-4131, CVE-2012-1601, CVE-2012-2121, CVE-2012-2123,

CVE-2012-2133

Severity
important
Lowest
Low
Medium
High
Critical

June 12, 2012

Topics%20covered

Topics Covered

security advisory denial of service critical ubuntu linux-lts-backport-natty

Package Information

https://launchpad.net/ubuntu/+source/linux-lts-backport-natty/2.6.38-15.60~lucid1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.