USN-1750-1: Linux kernel vulnerabilities

Releases

• Ubuntu 12.10

Packages

• linux - Linux kernel

Details

Mathias Krause discovered a bounds checking error for netlink messages
requesting SOCK_DIAG_BY_FAMILY. An unprivileged local user could exploit
this flaw to crash the system or run programs as an administrator.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 12.10

• linux-image-3.5.0-25-generic - 3.5.0-25.39
• linux-image-3.5.0-25-omap - 3.5.0-25.39
• linux-image-3.5.0-25-powerpc-smp - 3.5.0-25.39
• linux-image-3.5.0-25-highbank - 3.5.0-25.39
• linux-image-3.5.0-25-powerpc64-smp - 3.5.0-25.39

After a standard system update you need to reboot your computer to make
all the necessary changes.

References

• CVE-2013-1763

Related notices

• USN-1749-1: linux-image-3.5.0-25-generic, linux-lts-quantal
• USN-1751-1: linux-ti-omap4, linux-image-3.5.0-220-omap4