USN-1294-1: Linux kernel (Oneiric backport) vulnerabilities

08 December 2011

Several security issues were fixed in the kernel.

Releases

Packages

Details

Peter Huewe discovered an information leak in the handling of reading
security-related TPM data. A local, unprivileged user could read the
results of a previous TPM command. (CVE-2011-1162)

Vasiliy Kulikov discovered that taskstats did not enforce access
restrictions. A local attacker could exploit this to read certain
information, leading to a loss of privacy. (CVE-2011-2494)

Qianfeng Zhang discovered that the bridge networking interface incorrectly
handled certain network packets. A remote attacker could exploit this to
crash the system, leading to a denial of service. (CVE-2011-2942)

Yasuaki Ishimatsu discovered a flaw in the kernel's clock implementation. A
local unprivileged attacker could exploit this causing a denial of service.
(CVE-2011-3209)

Zheng Liu discovered a flaw in how the ext4 filesystem splits extents. A
local unprivileged attacker could exploit this to crash the system, leading
to a denial of service. (CVE-2011-3638)

Scot Doyle discovered that the bridge networking interface incorrectly
handled certain network packets. A remote attacker could exploit this to
crash the system, leading to a denial of service. (CVE-2011-4087)

A bug was found in the way headroom check was performed in
udp6_ufo_fragment() function. A remote attacker could use this flaw to
crash the system. (CVE-2011-4326)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 10.04

After a standard system update you need to reboot your computer to make
all the necessary changes.

Related notices

  • USN-1293-1: linux-image-2.6.35-31-powerpc, linux-image-2.6.35-31-server, linux-image-2.6.35-31-generic-pae, linux-image-2.6.35-31-powerpc-smp, linux, linux-image-2.6.35-31-virtual, linux-image-2.6.35-31-omap, linux-image-2.6.35-31-versatile, linux-image-2.6.35-31-generic, linux-image-2.6.35-31-powerpc64-smp
  • USN-1275-1: linux-image-3.0.0-13-powerpc64-smp, linux-image-3.0.0-13-server, linux, linux-image-3.0.0-13-omap, linux-image-3.0.0-13-virtual, linux-image-3.0.0-13-generic-pae, linux-image-3.0.0-13-powerpc-smp, linux-image-3.0.0-13-generic, linux-image-3.0.0-13-powerpc
  • USN-1244-1: linux-ti-omap4, linux-image-2.6.35-903-omap4
  • USN-1341-1: linux-image-2.6.35-32-powerpc-smp, linux-image-2.6.35-32-server, linux-image-2.6.35-32-generic, linux-image-2.6.35-32-versatile, linux, linux-image-2.6.35-32-powerpc, linux-image-2.6.35-32-omap, linux-image-2.6.35-32-powerpc64-smp, linux-image-2.6.35-32-generic-pae, linux-image-2.6.35-32-virtual
  • USN-1304-1: linux-image-2.6.38-1209-omap4, linux-ti-omap4
  • USN-1240-1: linux-image-2.6.32-219-dove, linux-mvl-dove
  • USN-1193-1: linux-image-2.6.38-11-powerpc, linux-image-2.6.38-11-omap, linux, linux-image-2.6.38-11-generic-pae, linux-image-2.6.38-11-server, linux-image-2.6.38-11-powerpc-smp, linux-image-2.6.38-11-generic, linux-image-2.6.38-11-powerpc64-smp, linux-image-2.6.38-11-virtual, linux-image-2.6.38-11-versatile
  • USN-1285-1: linux-image-2.6.38-13-versatile, linux-image-2.6.38-13-omap, linux-image-2.6.38-13-powerpc, linux-image-2.6.38-13-generic-pae, linux, linux-image-2.6.38-13-server, linux-image-2.6.38-13-generic, linux-image-2.6.38-13-powerpc64-smp, linux-image-2.6.38-13-virtual, linux-image-2.6.38-13-powerpc-smp
  • USN-1268-1: linux-image-2.6.24-30-virtual, linux-image-2.6.24-30-sparc64-smp, linux-image-2.6.24-30-386, linux-image-2.6.24-30-server, linux-image-2.6.24-30-lpia, linux-image-2.6.24-30-powerpc64-smp, linux-image-2.6.24-30-xen, linux-image-2.6.24-30-lpiacompat, linux-image-2.6.24-30-powerpc, linux-image-2.6.24-30-sparc64, linux-image-2.6.24-30-openvz, linux, linux-image-2.6.24-30-rt, linux-image-2.6.24-30-powerpc-smp, linux-image-2.6.24-30-hppa32, linux-image-2.6.24-30-hppa64, linux-image-2.6.24-30-itanium, linux-image-2.6.24-30-mckinley, linux-image-2.6.24-30-generic
  • USN-1325-1: linux-ti-omap4, linux-image-2.6.35-903-omap4
  • USN-1303-1: linux-mvl-dove, linux-image-2.6.32-421-dove
  • USN-1242-1: linux-image-2.6.35-30-generic, linux-image-2.6.35-30-server, linux-image-2.6.35-30-virtual, linux-image-2.6.35-30-generic-pae, linux-lts-backport-maverick
  • USN-1345-1: linux-image-2.6.38-13-versatile, linux-image-2.6.38-13-omap, linux-image-2.6.38-13-powerpc, linux-image-2.6.38-13-generic-pae, linux, linux-image-2.6.38-13-server, linux-image-2.6.38-13-generic, linux-image-2.6.38-13-powerpc64-smp, linux-image-2.6.38-13-virtual, linux-image-2.6.38-13-powerpc-smp
  • USN-1236-1: linux-image-2.6.24-29-386, linux-image-2.6.24-29-mckinley, linux-image-2.6.24-29-server, linux-image-2.6.24-29-lpia, linux-image-2.6.24-29-powerpc-smp, linux-image-2.6.24-29-generic, linux-image-2.6.24-29-rt, linux-image-2.6.24-29-hppa32, linux-image-2.6.24-29-powerpc, linux-image-2.6.24-29-sparc64, linux-image-2.6.24-29-itanium, linux-image-2.6.24-29-openvz, linux, linux-image-2.6.24-29-lpiacompat, linux-image-2.6.24-29-powerpc64-smp, linux-image-2.6.24-29-xen, linux-image-2.6.24-29-sparc64-smp, linux-image-2.6.24-29-hppa64, linux-image-2.6.24-29-virtual
  • USN-1281-1: linux-image-2.6.38-1209-omap4, linux-ti-omap4
  • USN-1332-1: linux-image-2.6.35-32-server, linux-image-2.6.35-32-generic, linux-lts-backport-maverick, linux-image-2.6.35-32-generic-pae, linux-image-2.6.35-32-virtual
  • USN-1323-1: linux-image-2.6.24-30-virtual, linux-image-2.6.24-30-sparc64-smp, linux-image-2.6.24-30-386, linux-image-2.6.24-30-server, linux-image-2.6.24-30-lpia, linux-image-2.6.24-30-powerpc64-smp, linux-image-2.6.24-30-xen, linux-image-2.6.24-30-lpiacompat, linux-image-2.6.24-30-powerpc, linux-image-2.6.24-30-sparc64, linux-image-2.6.24-30-openvz, linux, linux-image-2.6.24-30-rt, linux-image-2.6.24-30-powerpc-smp, linux-image-2.6.24-30-hppa32, linux-image-2.6.24-30-hppa64, linux-image-2.6.24-30-itanium, linux-image-2.6.24-30-mckinley, linux-image-2.6.24-30-generic
  • USN-1299-1: linux-ec2, linux-image-2.6.32-341-ec2
  • USN-1292-1: linux-image-2.6.35-31-server, linux-image-2.6.35-31-generic-pae, linux-image-2.6.35-31-virtual, linux-lts-backport-maverick, linux-image-2.6.35-31-generic
  • USN-1311-1: linux-image-2.6.32-37-generic, linux-image-2.6.32-37-server, linux-image-2.6.32-37-virtual, linux-image-2.6.32-37-powerpc, linux-image-2.6.32-37-preempt, linux, linux-image-2.6.32-37-generic-pae, linux-image-2.6.32-37-lpia, linux-image-2.6.32-37-powerpc-smp, linux-image-2.6.32-37-powerpc64-smp, linux-image-2.6.32-37-386, linux-image-2.6.32-37-sparc64-smp, linux-image-2.6.32-37-versatile, linux-image-2.6.32-37-sparc64, linux-image-2.6.32-37-ia64
  • USN-1243-1: linux-image-2.6.35-30-generic, linux-image-2.6.35-30-powerpc64-smp, linux-image-2.6.35-30-server, linux-image-2.6.35-30-versatile, linux-image-2.6.35-30-virtual, linux, linux-image-2.6.35-30-generic-pae, linux-image-2.6.35-30-powerpc-smp, linux-image-2.6.35-30-omap, linux-image-2.6.35-30-powerpc
  • USN-1241-1: linux-fsl-imx51, linux-image-2.6.31-611-imx51
  • USN-1318-1: linux-fsl-imx51, linux-image-2.6.31-612-imx51
  • USN-1245-1: linux-mvl-dove, linux-image-2.6.32-419-dove
  • USN-1302-1: linux-ti-omap4, linux-image-2.6.35-903-omap4
  • USN-1260-1: linux-image-3.0.0-1206-omap4, linux-ti-omap4
  • USN-1253-1: linux-image-2.6.32-35-powerpc-smp, linux-image-2.6.32-35-server, linux-image-2.6.32-35-powerpc, linux-image-2.6.32-35-powerpc64-smp, linux-image-2.6.32-35-ia64, linux-image-2.6.32-35-generic, linux, linux-image-2.6.32-35-versatile, linux-image-2.6.32-35-sparc64-smp, linux-image-2.6.32-35-preempt, linux-image-2.6.32-35-386, linux-image-2.6.32-35-sparc64, linux-image-2.6.32-35-generic-pae, linux-image-2.6.32-35-lpia, linux-image-2.6.32-35-virtual
  • USN-1256-1: linux-image-2.6.38-12-server, linux-lts-backport-natty, linux-image-2.6.38-12-generic-pae, linux-image-2.6.38-12-generic, linux-image-2.6.38-12-virtual
  • USN-1337-1: linux-lts-backport-natty, linux-image-2.6.38-13-generic-pae, linux-image-2.6.38-13-server, linux-image-2.6.38-13-generic, linux-image-2.6.38-13-virtual
  • USN-1319-1: linux-image-2.6.38-1209-omap4, linux-ti-omap4
  • USN-1239-1: linux-ec2, linux-image-2.6.32-319-ec2
  • USN-1279-1: linux-lts-backport-natty, linux-image-2.6.38-13-generic-pae, linux-image-2.6.38-13-server, linux-image-2.6.38-13-generic, linux-image-2.6.38-13-virtual