CVE-2011-3619 | Ubuntu

The apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 3.0 does not properly handle invalid parameters, which allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by writing to a /proc/#####/attr/current file.

From the Ubuntu Security Team

A flaw was discovered in the Linux kernel’s AppArmor security interface when invalid information was written to it. An unprivileged local user could use this to cause a denial of service on the system.

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
linux	14.04 LTS trusty	Not affected
	13.10 saucy	Not affected
	12.10 quantal	Not affected
	12.04 LTS precise	Not affected
	11.10 oneiric	Not affected
	11.04 natty	Fixed 2.6.38-11.47
	10.10 maverick	Fixed 2.6.35-32.66
	10.04 LTS lucid	Not affected
	8.04 LTS hardy	Not affected
linux-armadaxp	14.04 LTS trusty	Not in release
	13.10 saucy	Not in release
	12.10 quantal	Not affected
	12.04 LTS precise	Not affected
	11.10 oneiric	Not in release
	11.04 natty	Not in release
	10.04 LTS lucid	Not in release
	8.04 LTS hardy	Not in release
linux-ec2	14.04 LTS trusty	Not in release
	13.10 saucy	Not in release
	12.10 quantal	Not in release
	12.04 LTS precise	Not in release
	11.10 oneiric	Not in release
	11.04 natty	Not in release
	10.10 maverick	Ignored end of life
	10.04 LTS lucid	Not affected
	8.04 LTS hardy	Not in release
linux-flo	14.04 LTS trusty	Not in release
	13.10 saucy	Not in release
	12.10 quantal	Not in release
	12.04 LTS precise	Not in release
	10.04 LTS lucid	Not in release
linux-fsl-imx51	14.04 LTS trusty	Not in release
	13.10 saucy	Not in release
	12.10 quantal	Not in release
	12.04 LTS precise	Not in release
	11.10 oneiric	Not in release
	11.04 natty	Not in release
	10.10 maverick	Not in release
	10.04 LTS lucid	Not affected
	8.04 LTS hardy	Not in release
linux-goldfish	14.04 LTS trusty	Not in release
	13.10 saucy	Ignored
	12.10 quantal	Not in release
	12.04 LTS precise	Not in release
	10.04 LTS lucid	Not in release
linux-grouper	14.04 LTS trusty	Not in release
	13.10 saucy	Ignored
	12.10 quantal	Not in release
	12.04 LTS precise	Not in release
	10.04 LTS lucid	Not in release
linux-lts-backport-maverick	14.04 LTS trusty	Not in release
	13.10 saucy	Not in release
	12.10 quantal	Not in release
	12.04 LTS precise	Not in release
	11.10 oneiric	Not in release
	11.04 natty	Not in release
	10.10 maverick	Not in release
	10.04 LTS lucid	Fixed 2.6.35-32.66~lucid1
	8.04 LTS hardy	Not in release
linux-lts-backport-natty	14.04 LTS trusty	Not in release
	13.10 saucy	Not in release
	12.10 quantal	Not in release
	12.04 LTS precise	Not in release
	11.10 oneiric	Not in release
	11.04 natty	Not in release
	10.10 maverick	Not in release
	10.04 LTS lucid	Fixed 2.6.38-11.49~lucid1
	8.04 LTS hardy	Not in release
linux-lts-backport-oneiric	14.04 LTS trusty	Not in release
	13.10 saucy	Not in release
	12.10 quantal	Not in release
	12.04 LTS precise	Not in release
	11.10 oneiric	Not in release
	11.04 natty	Not in release
	10.10 maverick	Not in release
	10.04 LTS lucid	Not affected
	8.04 LTS hardy	Not in release
linux-maguro	14.04 LTS trusty	Not in release
	13.10 saucy	Ignored
	12.10 quantal	Not in release
	12.04 LTS precise	Not in release
	10.04 LTS lucid	Not in release
linux-mako	14.04 LTS trusty	Not in release
	13.10 saucy	Ignored
	12.10 quantal	Not in release
	12.04 LTS precise	Not in release
	10.04 LTS lucid	Not in release
linux-manta	14.04 LTS trusty	Not in release
	13.10 saucy	Ignored
	12.10 quantal	Not in release
	12.04 LTS precise	Not in release
	10.04 LTS lucid	Not in release
linux-mvl-dove	14.04 LTS trusty	Not in release
	13.10 saucy	Not in release
	12.10 quantal	Not in release
	12.04 LTS precise	Not in release
	11.10 oneiric	Not in release
	11.04 natty	Not in release
	10.10 maverick	Not affected
	10.04 LTS lucid	Ignored end of life
	8.04 LTS hardy	Not in release
linux-ti-omap4	14.04 LTS trusty	Not in release
	13.10 saucy	Not affected
	12.10 quantal	Not affected
	12.04 LTS precise	Not affected
	11.10 oneiric	Not affected
	11.04 natty	Fixed 2.6.38-1209.22
	10.10 maverick	Fixed 2.6.35-903.31
	10.04 LTS lucid	Not in release
	8.04 LTS hardy	Not in release

Notes

apw

this was introduced in the version of apparmour in maverick and has already been fixed after that

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package	Patch details
linux	Upstream: http://git.kernel.org/linus/a5b2c5b2ad5853591a6cac6134cd0f599a720865

References

Related Ubuntu Security Notices (USN)

USN-1379-1
Linux kernel vulnerabilities
28 February 2012

USN-1387-1
Linux kernel (Maverick backport) vulnerabilities
6 March 2012

USN-1383-1
Linux kernel (OMAP4) vulnerabilities
6 March 2012

USN-1394-1
linux-ti-omap4 vulnerabilities
7 March 2012

USN-1256-1
Linux kernel (Natty backport) vulnerabilities
9 November 2011

USN-1193-1
Linux kernel vulnerabilities
19 August 2011

Other references

https://www.cve.org/CVERecord?id=CVE-2011-3619