USN-1342-1: Linux kernel (Oneiric backport) vulnerability

Publication date

26 January 2012

Overview

The system could be made to run programs as an administrator.

Releases

10.04

Packages

Jüri Aedla discovered that the kernel incorrectly handled /proc//mem
permissions. A local attacker could exploit this and gain root privileges.

After a standard system update you need to reboot your computer to make all the necessary changes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release	Package Version
10.04 lucid	linux-image-3.0.0-15-server – 3.0.0-15.26~lucid1
	linux-image-3.0.0-15-generic – 3.0.0-15.26~lucid1
	linux-image-3.0.0-15-virtual – 3.0.0-15.26~lucid1
	linux-image-3.0.0-15-generic-pae – 3.0.0-15.26~lucid1

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro