Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 515
Alerts This Week
Warning Icon 1 515

Ubuntu 10.04 LTS USN-1824-1 Critical Kernel Info Leak DoS Threats

ubuntu
Calendar Grey May 15, 2013
Scroller Ubuntu
Critical kernel vulnerabilities in Ubuntu addressed in security notice USN-1824-2. Upgrade installations to improve protection.
Several security issues were fixed in the kernel.

Summary

Several security issues were fixed in the kernel.

Software Description:

- linux: Linux kernel

Details:

Mathias Krause discovered an information leak in the Linux kernel's ISO

9660 CDROM file system driver. A local user could exploit this flaw to

examine some of the kernel's heap memory. (CVE-2012-6549)

Mathias Krause discovered a flaw in xfrm_user in the Linux kernel. A local

attacker with NET_ADMIN capability could potentially exploit this flaw to

escalate privileges. (CVE-2013-1826)

A buffer overflow was discovered in the Linux Kernel's USB subsystem for

devices reporting the cdc-wdm class. A specially crafted USB device when

plugged-in could cause a denial of service (system crash) or possibly

execute arbitrary code. (CVE-2013-1860)

An information leak was discovered in the Linux kernel's /dev/dvb device. A

local user could exploit this flaw to obtain sensitive information from the

kernel's stack memory. (CVE-2013-1928)

An information leak in the ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory information leak critical privilege escalation DoS Ubuntu kernel

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.04 LTS:
  linux-image-2.6.32-47-386       2.6.32-47.109
  linux-image-2.6.32-47-generic   2.6.32-47.109
  linux-image-2.6.32-47-generic-pae  2.6.32-47.109
  linux-image-2.6.32-47-ia64      2.6.32-47.109
  linux-image-2.6.32-47-lpia      2.6.32-47.109
  linux-image-2.6.32-47-powerpc   2.6.32-47.109
  linux-image-2.6.32-47-powerpc-smp  2.6.32-47.109
  linux-image-2.6.32-47-powerpc64-smp  2.6.32-47.109
  linux-image-2.6.32-47-preempt   2.6.32-47.109
  linux-image-2.6.32-47-server    2.6.32-47.109
  linux-image-2.6.32-47-sparc64   2.6.32-47.109
  linux-image-2.6.32-47-sparc64-smp  2.6.32-47.109
  linux-image-2.6.32-47-versatile  2.6.32-47.109
  linux-image-2.6.32-47-virtual   2.6.32-47.109

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-generic,
linux-server, linux-powerpc), a standard system upgrade will automatically
perform this as well.

References

https://ubuntu.com/security/notices/USN-1824-1

CVE-2012-6549, CVE-2013-1826, CVE-2013-1860, CVE-2013-1928,

CVE-2013-2634

Severity
critical
Lowest
Low
Medium
High
Critical

May 15, 2013

Topics%20covered

Topics Covered

security advisory information leak critical privilege escalation DoS Ubuntu kernel

Package Information

https://launchpad.net/ubuntu/+source/linux/2.6.32-47.109

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.