USN-1287-1: Linux (OMAP4) vulnerability
Nick Bowler discovered the kernel GHASH message digest algorithm incorrectly handled error conditions. A local attacker could exploit this to cause a kernel oops.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-3.0.0-1206-omap4to a version that resolves this vulnerability.Fixed in 3.0.0-1206.13
Event History
Frequently Asked Questions
What is the severity of USN-1287-1?
The severity of USN-1287-1 is classified as potentially critical due to its ability for local attackers to cause a kernel oops.
How do I fix USN-1287-1?
To fix USN-1287-1, users should upgrade their kernel to version 3.0.0-1206.13 or a later version.
Who discovered the vulnerability in USN-1287-1?
The vulnerability in USN-1287-1 was discovered by Nick Bowler.
What software is affected by USN-1287-1?
USN-1287-1 affects the Linux image package linux-image-3.0.0-1206-omap4 for Ubuntu 11.10.
What kind of attack could exploit USN-1287-1?
A local attacker could exploit USN-1287-1 to trigger error conditions leading to a kernel oops.