Ubuntu Security Notices
USN-451-1

USN-451-1: Linux kernel vulnerabilities

Publication date

11 April 2007

Overview

Linux kernel vulnerabilities

Releases

Details

The kernel key management code did not correctly handle key reuse. A
local attacker could create many key requests, leading to a denial of
service. (CVE-2007-0006)

The kernel NFS code did not correctly validate NFSACL2 ACCESS requests.
If a system was serving NFS mounts, a remote attacker could send a
specially crafted packet, leading to a denial of service.
(CVE-2007-0772)

When dumping core, the kernel did not correctly handle PT_INTERP
processes. A local attacker could create situations where they could
read the contents of otherwise unreadable executable programs.
(CVE-2007-0958)

The kernel key management code did not correctly handle key reuse. A
local attacker could create many key requests, leading to a denial of
service. (CVE-2007-0006)

Update instructions

After a standard system upgrade you need to reboot your computer to effect the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release	Package Version
6.10 edgy	linux-image-2.6.17-11-generic – 2.6.17.1-11.37
	linux-image-2.6.17-11-server-bigiron – 2.6.17.1-11.37
	linux-image-2.6.17-11-sparc64-smp – 2.6.17.1-11.37
	linux-image-2.6.17-11-powerpc – 2.6.17.1-11.37
	linux-image-2.6.17-11-386 – 2.6.17.1-11.37
	linux-image-2.6.17-11-powerpc-smp – 2.6.17.1-11.37
	linux-image-2.6.17-11-sparc64 – 2.6.17.1-11.37
	linux-image-2.6.17-11-server – 2.6.17.1-11.37
	linux-image-2.6.17-11-powerpc64-smp – 2.6.17.1-11.37
6.06 dapper	linux-image-2.6.15-28-amd64-generic – 2.6.15-28.53
	linux-image-2.6.15-28-powerpc-smp – 2.6.15-28.53
	linux-image-2.6.15-28-amd64-k8 – 2.6.15-28.53
	linux-image-2.6.15-28-686 – 2.6.15-28.53
	linux-image-2.6.15-28-powerpc64-smp – 2.6.15-28.53
	linux-image-2.6.15-28-server-bigiron – 2.6.15-28.53
	linux-image-2.6.15-28-sparc64-smp – 2.6.15-28.53
	linux-image-2.6.15-28-server – 2.6.15-28.53
	linux-image-2.6.15-28-k7 – 2.6.15-28.53
	linux-image-2.6.15-28-amd64-server – 2.6.15-28.53
	linux-image-2.6.15-28-amd64-xeon – 2.6.15-28.53
	linux-image-2.6.15-28-386 – 2.6.15-28.53
	linux-image-2.6.15-28-powerpc – 2.6.15-28.53
	linux-image-2.6.15-28-sparc64 – 2.6.15-28.53

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

USN-451-1: Linux kernel vulnerabilities

Details

Update instructions

Reduce your security exposure

References