USN-1186-1: Linux kernel vulnerabilities

9 August 2011

linux vulnerabilities

A security issue affects these releases of Ubuntu and its derivatives:

  • Ubuntu 8.04 LTS

Summary

Multiple kernel flaws have been fixed.

Software Description

  • linux - Linux kernel

Details

Dan Rosenberg discovered that IPC structures were not correctly initialized on 64bit systems. A local attacker could exploit this to read kernel stack memory, leading to a loss of privacy. (CVE-2010-4073)

Steve Chen discovered that setsockopt did not correctly check MSS values. A local attacker could make a specially crafted socket call to crash the system, leading to a denial of service. (CVE-2010-4165)

Vladymyr Denysov discovered that Xen virtual CD-ROM devices were not handled correctly. A local attacker in a guest could make crafted blkback requests that would crash the host, leading to a denial of service. (CVE-2010-4238)

Vegard Nossum discovered that memory garbage collection was not handled correctly for active sockets. A local attacker could exploit this to allocate all available kernel memory, leading to a denial of service. (CVE-2010-4249)

Dan Carpenter discovered that the Infiniband driver did not correctly handle certain requests. A local user could exploit this to crash the system or potentially gain root privileges. (CVE-2010-4649, CVE-2011-1044)

Dan Rosenberg discovered that XFS did not correctly initialize memory. A local attacker could make crafted ioctl calls to leak portions of kernel stack memory, leading to a loss of privacy. (CVE-2011-0711)

Timo Warns discovered that MAC partition parsing routines did not correctly calculate block counts. A local attacker with physical access could plug in a specially crafted block device to crash the system or potentially gain root privileges. (CVE-2011-1010)

Neil Horman discovered that NFSv4 did not correctly handle certain orders of operation with ACL data. A remote attacker with access to an NFSv4 mount could exploit this to crash the system, leading to a denial of service. (CVE-2011-1090)

Vasiliy Kulikov discovered that the netfilter code did not check certain strings copied from userspace. A local attacker with netfilter access could exploit this to read kernel memory or crash the system, leading to a denial of service. (CVE-2011-1170, CVE-2011-1171, CVE-2011-1172, CVE-2011-2534)

Vasiliy Kulikov discovered that the Acorn Universal Networking driver did not correctly initialize memory. A remote attacker could send specially crafted traffic to read kernel stack memory, leading to a loss of privacy. (CVE-2011-1173)

Vasiliy Kulikov discovered that taskstats listeners were not correctly handled. A local attacker could expoit this to exhaust memory and CPU resources, leading to a denial of service. (CVE-2011-2484)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 8.04 LTS
linux-image-2.6.24-29-386 - 2.6.24-29.92
linux-image-2.6.24-29-generic - 2.6.24-29.92
linux-image-2.6.24-29-hppa32 - 2.6.24-29.92
linux-image-2.6.24-29-hppa64 - 2.6.24-29.92
linux-image-2.6.24-29-itanium - 2.6.24-29.92
linux-image-2.6.24-29-lpia - 2.6.24-29.92
linux-image-2.6.24-29-lpiacompat - 2.6.24-29.92
linux-image-2.6.24-29-mckinley - 2.6.24-29.92
linux-image-2.6.24-29-openvz - 2.6.24-29.92
linux-image-2.6.24-29-powerpc - 2.6.24-29.92
linux-image-2.6.24-29-powerpc-smp - 2.6.24-29.92
linux-image-2.6.24-29-powerpc64-smp - 2.6.24-29.92
linux-image-2.6.24-29-rt - 2.6.24-29.92
linux-image-2.6.24-29-server - 2.6.24-29.92
linux-image-2.6.24-29-sparc64 - 2.6.24-29.92
linux-image-2.6.24-29-sparc64-smp - 2.6.24-29.92
linux-image-2.6.24-29-virtual - 2.6.24-29.92
linux-image-2.6.24-29-xen - 2.6.24-29.92

To update your system, please follow these instructions: https://wiki.ubuntu.com/Security/Upgrades.

After a standard system update you need to reboot your computer to make all the necessary changes.

References