--- title: 'USN-1168-1: Linux kernel vulnerabilities | Ubuntu security notices' description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices/USN-1168-1 --- 1. [Ubuntu Security Notices](https://ubuntu.com/security/notices) 2. USN-1168-1 --- # USN-1168-1: Linux kernel vulnerabilities Publication date 15 July 2011 Overview Multiple kernel flaws have been fixed. Releases [10.04](https://ubuntu.com/security/notices?release=lucid) --- Open side navigation ## Packages * [linux](https://ubuntu.com/security/cves?package=linux) - Linux kernel ## Details Timo Warns discovered that the LDM disk partition handling code did not correctly handle certain values. By inserting a specially crafted disk device, a local attacker could exploit this to gain root privileges. ([CVE-2011-1017](https://ubuntu.com/security/CVE-2011-1017)) Neil Horman discovered that NFSv4 did not correctly handle certain orders of operation with ACL data. A remote attacker with access to an NFSv4 mount could exploit this to crash the system, leading to a denial of service. ([CVE-2011-1090](https://ubuntu.com/security/CVE-2011-1090)) Timo Warns discovered that OSF partition parsing routines did not correctly clear memory. A local attacker with physical access could plug in a specially crafted block device to read kernel memory, leading to a loss of privacy. ([CVE-2011-1163](https://ubuntu.com/security/CVE-2011-1163)) Dan Rosenberg discovered that MPT devices did not correctly validate certain values in ioctl calls. If these... --- Show more ## Update instructions After a standard system update you need to reboot your computer to make all the necessary changes. [Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security) ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. If you use linux-restricted-modules, you have to update that package as well to get modules which work with the new kernel version. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-server, linux-powerpc), a standard system upgrade will automatically perform this as well. The problem can be corrected by updating your system to the following package versions: | Ubuntu Release | Package Version | | --- | --- | | 10.04 lucid | [linux-image-2.6.32-33-sparc64](https://launchpad.net/ubuntu/+source/linux) –  [2.6.32-33.70](https://launchpad.net/ubuntu/+source/linux/2.6.32-33.70) | | | | [linux-image-2.6.32-33-generic](https://launchpad.net/ubuntu/+source/linux) –  [2.6.32-33.70](https://launchpad.net/ubuntu/+source/linux/2.6.32-33.70) | | | | [linux-image-2.6.32-33-virtual](https://launchpad.net/ubuntu/+source/linux) –  [2.6.32-33.70](https://launchpad.net/ubuntu/+source/linux/2.6.32-33.70) | | | | [linux-image-2.6.32-33-powerpc](https://launchpad.net/ubuntu/+source/linux) –  [2.6.32-33.70](https://launchpad.net/ubuntu/+source/linux/2.6.32-33.70) | | | | [linux-image-2.6.32-33-generic-pae](https://launchpad.net/ubuntu/+source/linux) –  [2.6.32-33.70](https://launchpad.net/ubuntu/+source/linux/2.6.32-33.70) | | | | [linux-image-2.6.32-33-powerpc64-smp](https://launchpad.net/ubuntu/+source/linux) –  [2.6.32-33.70](https://launchpad.net/ubuntu/+source/linux/2.6.32-33.70) | | | | [linux-image-2.6.32-33-preempt](https://launchpad.net/ubuntu/+source/linux) –  [2.6.32-33.70](https://launchpad.net/ubuntu/+source/linux/2.6.32-33.70) | | | | [linux-image-2.6.32-33-lpia](https://launchpad.net/ubuntu/+source/linux) –  [2.6.32-33.70](https://launchpad.net/ubuntu/+source/linux/2.6.32-33.70) | | | | [linux-image-2.6.32-33-ia64](https://launchpad.net/ubuntu/+source/linux) –  [2.6.32-33.70](https://launchpad.net/ubuntu/+source/linux/2.6.32-33.70) | | | | [linux-image-2.6.32-33-versatile](https://launchpad.net/ubuntu/+source/linux) –  [2.6.32-33.70](https://launchpad.net/ubuntu/+source/linux/2.6.32-33.70) | | | | [linux-image-2.6.32-33-server](https://launchpad.net/ubuntu/+source/linux) –  [2.6.32-33.70](https://launchpad.net/ubuntu/+source/linux/2.6.32-33.70) | | | | [linux-image-2.6.32-33-powerpc-smp](https://launchpad.net/ubuntu/+source/linux) –  [2.6.32-33.70](https://launchpad.net/ubuntu/+source/linux/2.6.32-33.70) | | | | [linux-image-2.6.32-33-386](https://launchpad.net/ubuntu/+source/linux) –  [2.6.32-33.70](https://launchpad.net/ubuntu/+source/linux/2.6.32-33.70) | | | | [linux-image-2.6.32-33-sparc64-smp](https://launchpad.net/ubuntu/+source/linux) –  [2.6.32-33.70](https://launchpad.net/ubuntu/+source/linux/2.6.32-33.70) | | | --- ### Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. [Get Ubuntu Pro](https://ubuntu.com/pro) ## References * [CVE-2011-3363](https://ubuntu.com/security/CVE-2011-3363) * [CVE-2011-2022](https://ubuntu.com/security/CVE-2011-2022) * [CVE-2011-1776](https://ubuntu.com/security/CVE-2011-1776) * [CVE-2011-1770](https://ubuntu.com/security/CVE-2011-1770) * [CVE-2011-1759](https://ubuntu.com/security/CVE-2011-1759) * [CVE-2011-1748](https://ubuntu.com/security/CVE-2011-1748) * [CVE-2011-1746](https://ubuntu.com/security/CVE-2011-1746) * [CVE-2011-1745](https://ubuntu.com/security/CVE-2011-1745) * [CVE-2011-1598](https://ubuntu.com/security/CVE-2011-1598) * [CVE-2011-1593](https://ubuntu.com/security/CVE-2011-1593) --- Show 5 more references ## Related notices id="usn" *Search* * [USN-1394-1](https://ubuntu.com/security/notices/USN-1394-1) * [USN-1383-1](https://ubuntu.com/security/notices/USN-1383-1) * [USN-1341-1](https://ubuntu.com/security/notices/USN-1341-1) * [USN-1332-1](https://ubuntu.com/security/notices/USN-1332-1) * [USN-1281-1](https://ubuntu.com/security/notices/USN-1281-1) * [USN-1256-1](https://ubuntu.com/security/notices/USN-1256-1) * [USN-1244-1](https://ubuntu.com/security/notices/USN-1244-1) * [USN-1243-1](https://ubuntu.com/security/notices/USN-1243-1) * [USN-1242-1](https://ubuntu.com/security/notices/USN-1242-1) * [USN-1241-1](https://ubuntu.com/security/notices/USN-1241-1) --- Show 22 more references --- Have additional questions? [Talk to a member of the team ›](https://wiki.ubuntu.com/SecurityTeam/FAQ?_ga=2.242131138.1744859116.1742138161-1500419473.1726851136&_gl=1*161muja*_gcl_au*MzUyMTIzNjI1LjE3MzYyNDQ4NTE.#Contact)