Your submission was sent successfully! Close

USN-614-1: Linux kernel vulnerabilities

03 June 2008

Linux kernel vulnerabilities

Releases

Packages

Details

It was discovered that PowerPC kernels did not correctly handle reporting
certain system details. By requesting a specific set of information,
a local attacker could cause a system crash resulting in a denial
of service. (CVE-2007-6694)

A race condition was discovered between dnotify fcntl() and close() in
the kernel. If a local attacker performed malicious dnotify requests,
they could cause memory consumption leading to a denial of service,
or possibly send arbitrary signals to any process. (CVE-2008-1375)

On SMP systems, a race condition existed in fcntl(). Local attackers
could perform malicious locks, causing system crashes and leading to
a denial of service. (CVE-2008-1669)

The tehuti network driver did not correctly handle certain IO functions.
A local attacker could perform malicious requests to the driver,
potentially accessing kernel memory, leading to privilege escalation
or access to private system information. (CVE-2008-1675)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 8.04

After a standard system upgrade you need to reboot your computer to
effect the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed. If
you use linux-restricted-modules, you have to update that package as
well to get modules which work with the new kernel version. Unless you
manually uninstalled the standard kernel metapackages (e.g. linux-386,
linux-powerpc, linux-amd64-generic), a standard system upgrade will
automatically perform this as well.

Related notices

  • USN-618-1: linux-image-2.6.15-52-itanium-smp, linux-backports-modules-2.6.15, linux-image-2.6.15-52-sparc64, linux-image-2.6.22-15-itanium, linux-source-2.6.20, linux-image-2.6.20-17-server, linux-image-2.6.15-52-amd64-server, linux-image-2.6.20-17-powerpc64-smp, linux-backports-modules-2.6.20, linux-image-2.6.15-52-amd64-k8, linux-image-2.6.15-52-amd64-xeon, linux-image-2.6.20-17-powerpc-smp, linux-image-2.6.22-15-powerpc64-smp, linux-restricted-modules-2.6.22, linux-image-2.6.15-52-server, linux-image-2.6.20-17-powerpc, linux-image-2.6.15-52-sparc64-smp, linux-image-2.6.15-52-mckinley, linux-image-2.6.22-15-mckinley, linux-image-2.6.20-17-itanium, linux-image-2.6.20-17-sparc64, linux-backports-modules-2.6.22, linux-image-2.6.20-17-mckinley, linux-image-2.6.22-15-lpia, linux-image-2.6.22-15-lpiacompat, linux-image-2.6.20-17-hppa32, linux-image-2.6.15-52-hppa32-smp, linux-image-2.6.22-15-powerpc-smp, linux-image-2.6.22-15-cell, linux-image-2.6.22-15-hppa32, linux-image-2.6.22-15-server, linux-image-2.6.20-17-sparc64-smp, linux-image-2.6.20-17-lowlatency, linux-image-2.6.20-17-generic, linux-image-2.6.22-15-hppa64, linux-image-2.6.15-52-server-bigiron, linux-image-2.6.22-15-sparc64-smp, linux-restricted-modules-2.6.15, linux-image-2.6.15-52-powerpc64-smp, linux-source-2.6.15, linux-ubuntu-modules-2.6.22, linux-image-2.6.15-52-hppa32, linux-image-2.6.15-52-powerpc-smp, linux-image-2.6.15-52-386, linux-source-2.6.22, linux-image-2.6.22-15-sparc64, linux-image-2.6.22-15-virtual, linux-image-2.6.15-52-itanium, linux-image-2.6.15-52-hppa64, linux-image-2.6.15-52-powerpc, linux-image-2.6.20-17-server-bigiron, linux-image-2.6.22-15-ume, linux-image-2.6.22-15-xen, linux-image-2.6.15-52-686, linux-image-2.6.15-52-hppa64-smp, linux-image-2.6.15-52-mckinley-smp, linux-image-2.6.22-15-386, linux-image-2.6.22-15-powerpc, linux-image-2.6.22-15-generic, linux-image-2.6.15-52-amd64-generic, linux-image-2.6.20-17-hppa64, linux-restricted-modules-2.6.20, linux-image-2.6.15-52-k7, linux-image-2.6.20-17-386, linux-image-2.6.22-15-rt