Your submission was sent successfully! Close

Thank you for contacting us. A member of our team will be in touch shortly. Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

USN-510-1: Linux kernel vulnerabilities

31 August 2007

Linux kernel vulnerabilities

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Learn more about Ubuntu Pro

Releases

Packages

Details

A flaw was discovered in the PPP over Ethernet implementation. Local
attackers could manipulate ioctls and cause kernel memory consumption
leading to a denial of service. (CVE-2007-2525)

An integer underflow was discovered in the cpuset filesystem. If mounted,
local attackers could obtain kernel memory using large file offsets while
reading the tasks file. This could disclose sensitive data. (CVE-2007-2875)

Vilmos Nebehaj discovered that the SCTP netfilter code did not correctly
validate certain states. A remote attacker could send a specially crafted
packet causing a denial of service. (CVE-2007-2876)

Luca Tettamanti discovered a flaw in the VFAT compat ioctls on 64-bit
systems. A local attacker could corrupt a kernel_dirent struct and cause
a denial of service. (CVE-2007-2878)

A flaw in the sysfs_readdir function allowed a local user to cause a
denial of service by dereferencing a NULL pointer. (CVE-2007-3104)

A buffer overflow was discovered in the random number generator. In
environments with granular assignment of root privileges, a local attacker
could gain additional privileges. (CVE-2007-3105)

A flaw was discovered in the usblcd driver. A local attacker could cause
large amounts of kernel memory consumption, leading to a denial of service.
(CVE-2007-3513)

Zhongling Wen discovered that the h323 conntrack handler did not correctly
handle certain bitfields. A remote attacker could send a specially crafted
packet and cause a denial of service. (CVE-2007-3642)

A flaw was discovered in the CIFS mount security checking. Remote attackers
could spoof CIFS network traffic, which could lead a client to trust the
connection. (CVE-2007-3843)

It was discovered that certain setuid-root processes did not correctly
reset process death signal handlers. A local user could manipulate this
to send signals to processes they would not normally have access to.
(CVE-2007-3848)

The Direct Rendering Manager for the i915 driver could be made to write
to arbitrary memory locations. An attacker with access to a running X11
session could send a specially crafted buffer and gain root privileges.
(CVE-2007-3851)

It was discovered that the aacraid SCSI driver did not correctly check
permissions on certain ioctls. A local attacker could cause a denial
of service or gain privileges. (CVE-2007-4308)

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Learn more about Ubuntu Pro

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 7.04

After a standard system upgrade you need to reboot your computer to
effect the necessary changes.

References

Related notices

  • USN-489-1: linux-image-2.6.15-28-powerpc, linux-image-2.6.15-28-amd64-k8, linux-image-2.6.15-28-mckinley-smp, linux-image-2.6.15-28-powerpc-smp, linux-image-2.6.15-28-686, linux-image-2.6.15-28-386, linux-image-2.6.15-28-amd64-xeon, linux-image-2.6.15-28-powerpc64-smp, linux-image-2.6.15-28-mckinley, linux-image-2.6.15-28-sparc64, linux-image-2.6.15-28-server, linux-image-2.6.15-28-server-bigiron, linux-image-2.6.15-28-k7, linux-image-2.6.15-28-amd64-server, linux-image-2.6.15-28-sparc64-smp, linux-image-2.6.15-28-amd64-generic
  • USN-486-1: linux-image-2.6.17-12-sparc64-smp, linux-image-2.6.17-12-powerpc, linux-image-2.6.17-12-generic, linux-image-2.6.17-12-server, linux-image-2.6.17-12-386, linux-image-2.6.17-12-hppa64, linux-image-2.6.17-12-server-bigiron, linux-image-2.6.17-12-itanium, linux-image-2.6.17-12-powerpc-smp, linux-image-2.6.17-12-sparc64, linux-image-2.6.17-12-mckinley, linux-image-2.6.17-12-powerpc64-smp, linux-image-2.6.17-12-hppa32
  • USN-509-1: linux-image-2.6.17-12-sparc64-smp, linux-source-2.6.17, linux-image-2.6.17-12-powerpc, linux-image-2.6.17-12-generic, linux-image-2.6.17-12-server, linux-image-2.6.17-12-386, linux-image-2.6.17-12-hppa64, linux-image-2.6.17-12-server-bigiron, linux-image-2.6.17-12-itanium, linux-image-2.6.17-12-powerpc-smp, linux-image-2.6.17-12-sparc64, linux-image-2.6.17-12-mckinley, linux-image-2.6.17-12-powerpc64-smp, linux-image-2.6.17-12-hppa32
  • USN-508-1: linux-image-2.6.15-29-hppa32, linux-image-2.6.15-29-sparc64, linux-image-2.6.15-29-amd64-xeon, linux-image-2.6.15-29-k7, linux-image-2.6.15-29-powerpc, linux-image-2.6.15-29-server-bigiron, linux-image-2.6.15-29-hppa64-smp, linux-image-2.6.15-29-sparc64-smp, linux-image-2.6.15-29-powerpc64-smp, linux-image-2.6.15-29-server, linux-image-2.6.15-29-hppa64, linux-image-2.6.15-29-hppa32-smp, linux-image-2.6.15-29-amd64-server, linux-image-2.6.15-29-powerpc-smp, linux-image-2.6.15-29-386, linux-source-2.6.15, linux-image-2.6.15-29-itanium, linux-image-2.6.15-29-686, linux-image-2.6.15-29-mckinley, linux-image-2.6.15-29-itanium-smp, linux-image-2.6.15-29-amd64-generic, linux-image-2.6.15-29-amd64-k8, linux-image-2.6.15-29-mckinley-smp

Join the discussion

Need help with your security needs?

Ubuntu Pro provides up to ten-year security coverage for over 23,000 open-source packages within the Ubuntu Main and Universe repositories.

Talk to an expert to find out what would work best for you

Further reading