USN-1023-1: Linux kernel vulnerabilities
Nelson Elhage discovered several problems with the Acorn Econet protocol driver. A local user could cause a denial of service via a NULL pointer dereference, escalate privileges by overflowing the kernel stack, and assign Econet addresses to arbitrary interfaces. (CVE-2010-3848, CVE-2010-3849, CVE-2010-3850) Brad Spengler discovered that the wireless extensions did not correctly validate certain request sizes. A local attacker could exploit this to read portions of kernel memory, leading to a loss of privacy. (CVE-2010-2955) Dan Rosenberg discovered that the VIA video driver did not correctly clear kernel memory. A local attacker could exploit this to read kernel stack memory, leading to a loss of privacy. (CVE-2010-4082) A flaw was discovered in the Linux kernel's splice system call. A local user could use this flaw to cause a denial of service (system crash). (CVE-2013-2128)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-serverto a version that resolves this vulnerability.Fixed in 2.6.31-22.69 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-ia64to a version that resolves this vulnerability.Fixed in 2.6.31-22.69 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-307-ec2to a version that resolves this vulnerability.Fixed in 2.6.31-307.22 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-generic-paeto a version that resolves this vulnerability.Fixed in 2.6.31-22.69 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-386to a version that resolves this vulnerability.Fixed in 2.6.31-22.69 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-powerpcto a version that resolves this vulnerability.Fixed in 2.6.31-22.69 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-sparc64to a version that resolves this vulnerability.Fixed in 2.6.31-22.69 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-sparc64-smpto a version that resolves this vulnerability.Fixed in 2.6.31-22.69 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-powerpc-smpto a version that resolves this vulnerability.Fixed in 2.6.31-22.69 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-virtualto a version that resolves this vulnerability.Fixed in 2.6.31-22.69 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-powerpc64-smpto a version that resolves this vulnerability.Fixed in 2.6.31-22.69 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-genericto a version that resolves this vulnerability.Fixed in 2.6.31-22.69 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-lpiato a version that resolves this vulnerability.Fixed in 2.6.31-22.69 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-powerpc64-smpto a version that resolves this vulnerability.Fixed in 2.6.24-28.81 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-hppa32to a version that resolves this vulnerability.Fixed in 2.6.24-28.81 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-genericto a version that resolves this vulnerability.Fixed in 2.6.24-28.81 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-powerpcto a version that resolves this vulnerability.Fixed in 2.6.24-28.81 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-sparc64-smpto a version that resolves this vulnerability.Fixed in 2.6.24-28.81 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-itaniumto a version that resolves this vulnerability.Fixed in 2.6.24-28.81 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-openvzto a version that resolves this vulnerability.Fixed in 2.6.24-28.81 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-virtualto a version that resolves this vulnerability.Fixed in 2.6.24-28.81 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-rtto a version that resolves this vulnerability.Fixed in 2.6.24-28.81 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-lpiato a version that resolves this vulnerability.Fixed in 2.6.24-28.81 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-hppa64to a version that resolves this vulnerability.Fixed in 2.6.24-28.81 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-mckinleyto a version that resolves this vulnerability.Fixed in 2.6.24-28.81 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-serverto a version that resolves this vulnerability.Fixed in 2.6.24-28.81 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-powerpc-smpto a version that resolves this vulnerability.Fixed in 2.6.24-28.81 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-386to a version that resolves this vulnerability.Fixed in 2.6.24-28.81 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-lpiacompatto a version that resolves this vulnerability.Fixed in 2.6.24-28.81 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-sparc64to a version that resolves this vulnerability.Fixed in 2.6.24-28.81 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-xento a version that resolves this vulnerability.Fixed in 2.6.24-28.81 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-hppa64to a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-mckinleyto a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-powerpc-smpto a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-hppa32-smpto a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-686to a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-amd64-k8to a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-amd64-serverto a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-386to a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-sparc64-smpto a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-k7to a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-sparc64to a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-serverto a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-powerpc64-smpto a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-hppa32to a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-mckinley-smpto a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-server-bigironto a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-itanium-smpto a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-amd64-xeonto a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-powerpcto a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-amd64-genericto a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-hppa64-smpto a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-itaniumto a version that resolves this vulnerability.Fixed in 2.6.15-55.90 - Upgrade
Upgrade
ubuntu/linux-image-2.6.35-23-powerpc64-smpto a version that resolves this vulnerability.Fixed in 2.6.35-23.41 - Upgrade
Upgrade
ubuntu/linux-image-2.6.35-23-virtualto a version that resolves this vulnerability.Fixed in 2.6.35-23.41 - Upgrade
Upgrade
ubuntu/linux-image-2.6.35-23-versatileto a version that resolves this vulnerability.Fixed in 2.6.35-23.41 - Upgrade
Upgrade
ubuntu/linux-image-2.6.35-23-genericto a version that resolves this vulnerability.Fixed in 2.6.35-23.41 - Upgrade
Upgrade
ubuntu/linux-image-2.6.35-23-powerpc-smpto a version that resolves this vulnerability.Fixed in 2.6.35-23.41 - Upgrade
Upgrade
ubuntu/linux-image-2.6.35-23-powerpcto a version that resolves this vulnerability.Fixed in 2.6.35-23.41 - Upgrade
Upgrade
ubuntu/linux-image-2.6.35-23-omapto a version that resolves this vulnerability.Fixed in 2.6.35-23.41 - Upgrade
Upgrade
ubuntu/linux-image-2.6.35-23-generic-paeto a version that resolves this vulnerability.Fixed in 2.6.35-23.41 - Upgrade
Upgrade
ubuntu/linux-image-2.6.35-23-serverto a version that resolves this vulnerability.Fixed in 2.6.35-23.41 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-26-genericto a version that resolves this vulnerability.Fixed in 2.6.32-26.48 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-26-sparc64-smpto a version that resolves this vulnerability.Fixed in 2.6.32-26.48 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-26-preemptto a version that resolves this vulnerability.Fixed in 2.6.32-26.48 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-26-powerpc-smpto a version that resolves this vulnerability.Fixed in 2.6.32-26.48 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-26-versatileto a version that resolves this vulnerability.Fixed in 2.6.32-26.48 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-26-powerpc64-smpto a version that resolves this vulnerability.Fixed in 2.6.32-26.48 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-26-virtualto a version that resolves this vulnerability.Fixed in 2.6.32-26.48 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-26-generic-paeto a version that resolves this vulnerability.Fixed in 2.6.32-26.48 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-26-lpiato a version that resolves this vulnerability.Fixed in 2.6.32-26.48 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-26-powerpcto a version that resolves this vulnerability.Fixed in 2.6.32-26.48 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-310-ec2to a version that resolves this vulnerability.Fixed in 2.6.32-310.21 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-26-sparc64to a version that resolves this vulnerability.Fixed in 2.6.32-26.48 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-26-serverto a version that resolves this vulnerability.Fixed in 2.6.32-26.48 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-26-ia64to a version that resolves this vulnerability.Fixed in 2.6.32-26.48 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-26-386to a version that resolves this vulnerability.Fixed in 2.6.32-26.48
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-1023-1?
The severity of USN-1023-1 is considered high due to potential denial of service and privilege escalation vulnerabilities.
How do I fix USN-1023-1?
To fix USN-1023-1, update your system to the latest kernel version specified in the Ubuntu security notice.
What vulnerabilities are associated with USN-1023-1?
USN-1023-1 addresses vulnerabilities including CVE-2010-3848, CVE-2010-3849, and CVE-2010-2955.
Who discovered the issue outlined in USN-1023-1?
The issue outlined in USN-1023-1 was discovered by Nelson Elhage.
Which Ubuntu versions are affected by USN-1023-1?
USN-1023-1 affects Ubuntu version 9.10 and its associated kernel images.