--- title: 'USN-1202-1: Linux kernel (OMAP4) vulnerabilities | Ubuntu security notices' description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices/USN-1202-1 --- 1. [Ubuntu Security Notices](https://ubuntu.com/security/notices) 2. USN-1202-1 --- # USN-1202-1: Linux kernel (OMAP4) vulnerabilities Publication date 13 September 2011 Overview Multiple kernel flaws have been fixed. Releases [10.10](https://ubuntu.com/security/notices?release=maverick) --- Open side navigation ## Packages * [linux-ti-omap4](https://ubuntu.com/security/cves?package=linux-ti-omap4) - Linux kernel for OMAP4 ## Details Dan Rosenberg discovered that several network ioctls did not clear kernel memory correctly. A local user could exploit this to read kernel stack memory, leading to a loss of privacy. ([CVE-2010-3296](https://ubuntu.com/security/CVE-2010-3296), [CVE-2010-3297](https://ubuntu.com/security/CVE-2010-3297)) Brad Spengler discovered that stack memory for new a process was not correctly calculated. A local attacker could exploit this to crash the system, leading to a denial of service. ([CVE-2010-3858](https://ubuntu.com/security/CVE-2010-3858)) Dan Rosenberg discovered that the Linux kernel TIPC implementation contained multiple integer signedness errors. A local attacker could exploit this to gain root privileges. ([CVE-2010-3859](https://ubuntu.com/security/CVE-2010-3859)) Dan Rosenberg discovered that the CAN protocol on 64bit systems did not correctly calculate the size of certain buffers. A local attacker could exploit this to crash the system or possibly... --- Show more ## Update instructions After a standard system update you need to reboot your computer to make all the necessary changes. [Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security) The problem can be corrected by updating your system to the following package versions: | Ubuntu Release | Package Version | | --- | --- | | 10.10 maverick | [linux-image-2.6.35-903-omap4](https://launchpad.net/ubuntu/+source/linux-ti-omap4) –  [2.6.35-903.24](https://launchpad.net/ubuntu/+source/linux-ti-omap4/2.6.35-903.24) | | | --- ### Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. [Get Ubuntu Pro](https://ubuntu.com/pro) ## References *Search* * [CVE-2011-4914](https://ubuntu.com/security/CVE-2011-4914) * [CVE-2011-4913](https://ubuntu.com/security/CVE-2011-4913) * [CVE-2011-3637](https://ubuntu.com/security/CVE-2011-3637) * [CVE-2011-2918](https://ubuntu.com/security/CVE-2011-2918) * [CVE-2011-2699](https://ubuntu.com/security/CVE-2011-2699) * [CVE-2011-2534](https://ubuntu.com/security/CVE-2011-2534) * [CVE-2011-2492](https://ubuntu.com/security/CVE-2011-2492) * [CVE-2011-2484](https://ubuntu.com/security/CVE-2011-2484) * [CVE-2011-2022](https://ubuntu.com/security/CVE-2011-2022) * [CVE-2011-1833](https://ubuntu.com/security/CVE-2011-1833) --- Show 69 more references ## Related notices id="usn" *Search* * [USN-1256-1](https://ubuntu.com/security/notices/USN-1256-1) * [USN-1253-1](https://ubuntu.com/security/notices/USN-1253-1) * [USN-1245-1](https://ubuntu.com/security/notices/USN-1245-1) * [USN-1240-1](https://ubuntu.com/security/notices/USN-1240-1) * [USN-1239-1](https://ubuntu.com/security/notices/USN-1239-1) * [USN-1227-1](https://ubuntu.com/security/notices/USN-1227-1) * [USN-1225-1](https://ubuntu.com/security/notices/USN-1225-1) * [USN-1219-1](https://ubuntu.com/security/notices/USN-1219-1) * [USN-1218-1](https://ubuntu.com/security/notices/USN-1218-1) * [USN-1216-1](https://ubuntu.com/security/notices/USN-1216-1) --- Show 44 more references