Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Ubuntu 10.04 LTS USN-1683-1 Critical: Kernel Information Leak

ubuntu
Calendar Grey January 10, 2013
Scroller Ubuntu
An Ubuntu Security Announcement warns of a kernel vulnerability that risks exposing sensitive system data. Users should update their systems promptly to stay secure
The system could be made to leak sensitive system information.

Summary

The system could be made to leak sensitive system information.

Software Description:

- linux: Linux kernel

Details:

A flaw was discovered in the Linux kernel's handling of script execution

when module loading is enabled. A local attacker could exploit this flaw to

cause a leak of kernel stack contents.

Topics%20covered

Topics Covered

security advisory information leak critical kernel local attack ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.04 LTS:
  linux-image-2.6.32-45-386       2.6.32-45.102
  linux-image-2.6.32-45-generic   2.6.32-45.102
  linux-image-2.6.32-45-generic-pae  2.6.32-45.102
  linux-image-2.6.32-45-ia64      2.6.32-45.102
  linux-image-2.6.32-45-lpia      2.6.32-45.102
  linux-image-2.6.32-45-powerpc   2.6.32-45.102
  linux-image-2.6.32-45-powerpc-smp  2.6.32-45.102
  linux-image-2.6.32-45-powerpc64-smp  2.6.32-45.102
  linux-image-2.6.32-45-preempt   2.6.32-45.102
  linux-image-2.6.32-45-server    2.6.32-45.102
  linux-image-2.6.32-45-sparc64   2.6.32-45.102
  linux-image-2.6.32-45-sparc64-smp  2.6.32-45.102
  linux-image-2.6.32-45-versatile  2.6.32-45.102
  linux-image-2.6.32-45-virtual   2.6.32-45.102

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

CVE-2012-4530

Severity
critical
Lowest
Low
Medium
High
Critical

January 10, 2013

Topics%20covered

Topics Covered

security advisory information leak critical kernel local attack ubuntu

Package Information

https://launchpad.net/ubuntu/+source/linux/2.6.32-45.102

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.