USN-1490-1: Linux kernel (Natty backport) vulnerabilities

29 June 2012

Several security issues were fixed in the kernel.

Releases

Packages

  • linux-lts-backport-natty - Linux kernel backport from Natty

Details

Stephan Mueller reported a flaw in the Linux kernel's dl2k network driver's
handling of ioctls. An unprivileged local user could leverage this flaw to
cause a denial of service. (CVE-2012-2313)

Timo Warns reported multiple flaws in the Linux kernel's hfsplus
filesystem. An unprivileged local user could exploit these flaws to gain
root system priviliges. (CVE-2012-2319)

A flaw was discovered in the Linux kernel's NFSv4 (Network file system)
handling of ACLs (access control lists). A remote NFS server (attacker)
could cause a denial of service (OOPS). (CVE-2012-2375)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 10.04

After a standard system update you need to reboot your computer to make
all the necessary changes.

Related notices

  • USN-1493-1: linux-image-2.6.24-31-rt, linux-image-2.6.24-31-powerpc-smp, linux-image-2.6.24-31-openvz, linux-image-2.6.24-31-generic, linux-image-2.6.24-31-xen, linux-image-2.6.24-31-powerpc, linux, linux-image-2.6.24-31-powerpc64-smp, linux-image-2.6.24-31-lpia, linux-image-2.6.24-31-hppa64, linux-image-2.6.24-31-386, linux-image-2.6.24-31-mckinley, linux-image-2.6.24-31-sparc64, linux-image-2.6.24-31-lpiacompat, linux-image-2.6.24-31-sparc64-smp, linux-image-2.6.24-31-virtual, linux-image-2.6.24-31-itanium, linux-image-2.6.24-31-hppa32, linux-image-2.6.24-31-server
  • USN-1494-1: linux-image-3.2.0-1415-omap4, linux-ti-omap4
  • USN-1489-1: linux-image-3.0.0-22-generic-pae, linux-image-3.0.0-22-generic, linux-image-3.0.0-22-virtual, linux-image-3.0.0-22-server, linux-lts-backport-oneiric
  • USN-1492-1: linux-image-2.6.32-41-powerpc, linux-image-2.6.32-41-versatile, linux-image-2.6.32-41-server, linux-image-2.6.32-41-generic, linux-image-2.6.32-41-sparc64, linux-image-2.6.32-41-sparc64-smp, linux-image-2.6.32-41-386, linux-image-2.6.32-41-ia64, linux-image-2.6.32-41-powerpc-smp, linux-image-2.6.32-41-powerpc64-smp, linux, linux-image-2.6.32-41-lpia, linux-image-2.6.32-41-generic-pae, linux-image-2.6.32-41-virtual, linux-image-2.6.32-41-preempt
  • USN-1486-1: linux-image-3.2.0-26-omap, linux-image-3.2.0-26-powerpc-smp, linux-image-3.2.0-26-virtual, linux-image-3.2.0-26-powerpc64-smp, linux-image-3.2.0-26-highbank, linux, linux-image-3.2.0-26-generic, linux-image-3.2.0-26-generic-pae
  • USN-1487-1: linux-image-3.0.0-22-generic-pae, linux-image-3.0.0-22-generic, linux-image-3.0.0-22-powerpc64-smp, linux-image-3.0.0-22-omap, linux-image-3.0.0-22-virtual, linux-image-3.0.0-22-server, linux-image-3.0.0-22-powerpc, linux, linux-image-3.0.0-22-powerpc-smp
  • USN-1476-1: linux-image-3.0.0-1211-omap4, linux-ti-omap4
  • USN-1472-1: linux-image-3.0.0-21-powerpc-smp, linux-image-3.0.0-21-omap, linux-image-3.0.0-21-powerpc, linux-image-3.0.0-21-generic-pae, linux-image-3.0.0-21-virtual, linux, linux-image-3.0.0-21-generic, linux-image-3.0.0-21-server, linux-image-3.0.0-21-powerpc64-smp
  • USN-1473-1: linux-image-3.2.0-25-powerpc-smp, linux-image-3.2.0-25-powerpc64-smp, linux-image-3.2.0-25-generic, linux-image-3.2.0-25-virtual, linux-image-3.2.0-25-generic-pae, linux-image-3.2.0-25-highbank, linux-image-3.2.0-25-omap, linux
  • USN-1488-1: linux-image-2.6.38-15-server, linux-image-2.6.38-15-versatile, linux-image-2.6.38-15-virtual, linux-image-2.6.38-15-generic-pae, linux-image-2.6.38-15-powerpc, linux-image-2.6.38-15-powerpc64-smp, linux-image-2.6.38-15-powerpc-smp, linux, linux-image-2.6.38-15-omap, linux-image-2.6.38-15-generic
  • USN-1499-1: linux-ti-omap4, linux-image-3.0.0-1212-omap4
  • USN-1471-1: linux-image-3.0.0-21-generic-pae, linux-image-3.0.0-21-virtual, linux-image-3.0.0-21-generic, linux-image-3.0.0-21-server, linux-lts-backport-oneiric
  • USN-1530-1: linux-ti-omap4, linux-image-2.6.38-1209-omap4
  • USN-1474-1: linux-ti-omap4, linux-image-3.2.0-1414-omap4
  • USN-1491-1: linux-ec2, linux-image-2.6.32-345-ec2