USN-1271-1: Linux kernel (FSL-IMX51) vulnerabilities
Publication date
21 November 2011
Overview
Several security issues were fixed in the kernel.
Releases
Packages
- linux-fsl-imx51 - Linux kernel for IMX51
Details
It was discovered that CIFS incorrectly handled authentication. When a user
had a CIFS share mounted that required authentication, a local user could
mount the same share without knowing the correct password. (CVE-2011-1585)
It was discovered that the GRE protocol incorrectly handled netns
initialization. A remote attacker could send a packet while the ip_gre
module was loading, and crash the system, leading to a denial of service.
(CVE-2011-1767)
It was discovered that the IP/IP protocol incorrectly handled netns
initialization. A remote attacker could send a packet while the ipip module
was loading, and crash the system, leading to a denial of service.
(CVE-2011-1768)
Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly
handled unlock requests. A local attacker could exploit this to cause...
It was discovered that CIFS incorrectly handled authentication. When a user
had a CIFS share mounted that required authentication, a local user could
mount the same share without knowing the correct password. (CVE-2011-1585)
It was discovered that the GRE protocol incorrectly handled netns
initialization. A remote attacker could send a packet while the ip_gre
module was loading, and crash the system, leading to a denial of service.
(CVE-2011-1767)
It was discovered that the IP/IP protocol incorrectly handled netns
initialization. A remote attacker could send a packet while the ipip module
was loading, and crash the system, leading to a denial of service.
(CVE-2011-1768)
Vasily Averin discovered that the NFS Lock Manager (NLM) incorrectly
handled unlock requests. A local attacker could exploit this to cause a
denial of service. (CVE-2011-2491)
Update instructions
After a standard system update you need to reboot your computer to make all the necessary changes.
Learn more about how to get the fixes.The problem can be corrected by updating your system to the following package versions:
Ubuntu Release | Package Version | ||
---|---|---|---|
10.04 lucid | linux-image-2.6.31-612-imx51 – 2.6.31-612.30 |
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.
References
Related notices
- USN-1286-1
- USN-1285-1
- USN-1281-1
- USN-1280-1
- USN-1279-1
- USN-1278-1
- USN-1274-1
- USN-1272-1
- USN-1269-1
- USN-1268-1
- USN-1286-1
- USN-1285-1
- USN-1281-1
- USN-1280-1
- USN-1279-1
- USN-1278-1
- USN-1274-1
- USN-1272-1
- USN-1269-1
- USN-1268-1
- USN-1256-1
- USN-1244-1
- USN-1218-1
- USN-1216-1
- USN-1208-1
- USN-1203-1
Have additional questions?