Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Ubuntu 10.04 LTS: 1594-1 Moderate: Kernel Denial Of Service Exploit

ubuntu
Calendar Grey October 3, 2012
Scroller Ubuntu
A variety of vulnerabilities have been resolved in the Linux kernel for Ubuntu 10.04 LTS. Urgent patches are necessary.
Several security issues were fixed in the kernel.

Summary

Several security issues were fixed in the kernel.

Software Description:

- linux-lts-backport-oneiric: Linux kernel backport from Oneiric

Details:

Vadim Ponomarev discovered a flaw in the Linux kernel causing a reference

leak when PID namespaces are used. A remote attacker could exploit this

flaw causing a denial of service. (CVE-2012-2127)

A flaw was found in how the Linux kernel's KVM (Kernel-based Virtual

Machine) subsystem handled MSI (Message Signaled Interrupts). A local

unprivileged user could exploit this flaw to cause a denial of service or

potentially elevate privileges. (CVE-2012-2137)

Topics%20covered

Topics Covered

security advisory update privilege escalation exploit kernel ubuntu dos

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.04 LTS:
  linux-image-3.0.0-26-generic    3.0.0-26.43~lucid1
  linux-image-3.0.0-26-generic-pae  3.0.0-26.43~lucid1
  linux-image-3.0.0-26-server     3.0.0-26.43~lucid1
  linux-image-3.0.0-26-virtual    3.0.0-26.43~lucid1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

https://ubuntu.com/security/notices/USN-1594-1

CVE-2012-2127, CVE-2012-2137

Severity
important
Lowest
Low
Medium
High
Critical

October 03, 2012

Topics%20covered

Topics Covered

security advisory update privilege escalation exploit kernel ubuntu dos

Package Information

https://launchpad.net/ubuntu/+source/linux-lts-backport-oneiric/3.0.0-26.43~lucid1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.