Ubuntu 10.04 LTS USN-1798-1 Critical: Kernel Local Exploits Addressed

Several security issues were fixed in the kernel.

Software Description:

- linux-ec2: Linux kernel for EC2

Details:

Mathias Krause discovered several errors in the Linux kernel's xfrm_user

implementation. A local attacker could exploit these flaws to examine parts

of kernel memory. (CVE-2012-6537)

Mathias Krause discovered information leak in the Linux kernel's compat

ioctl interface. A local user could exploit the flaw to examine parts of

kernel stack memory (CVE-2012-6539)

Mathias Krause discovered an information leak in the Linux kernel's

getsockopt for IP_VS_SO_GET_TIMEOUT. A local user could exploit this flaw

to examine parts of kernel stack memory. (CVE-2012-6540)

Emese Revfy discovered that in the Linux kernel signal handlers could leak

address information across an exec, making it possible to by pass ASLR

(Address Space Layout Randomization). A local user could use this flaw to

by pass ASLR to reliably deliver an exploit payload that would otherw...