USN-1291-1: Linux kernel vulnerabilities
A bug was discovered in the XFS filesystem's handling of pathnames. A local attacker could exploit this to crash the system, leading to a denial of service, or gain root privileges. (CVE-2011-4077) A flaw was found in the Journaling Block Device (JBD). A local attacker able to mount ext3 or ext4 file systems could exploit this to crash the system, leading to a denial of service. (CVE-2011-4132) Clement Lecigne discovered a bug in the HFS file system bounds checking. When a malformed HFS file system is mounted a local user could crash the system or gain root privileges. (CVE-2011-4330)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-2.6.24-30-virtualto a version that resolves this vulnerability.Fixed in 2.6.24-30.97 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-30-serverto a version that resolves this vulnerability.Fixed in 2.6.24-30.97 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-30-mckinleyto a version that resolves this vulnerability.Fixed in 2.6.24-30.97 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-30-sparc64-smpto a version that resolves this vulnerability.Fixed in 2.6.24-30.97 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-30-xento a version that resolves this vulnerability.Fixed in 2.6.24-30.97 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-30-powerpc-smpto a version that resolves this vulnerability.Fixed in 2.6.24-30.97 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-30-lpiacompatto a version that resolves this vulnerability.Fixed in 2.6.24-30.97 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-30-sparc64to a version that resolves this vulnerability.Fixed in 2.6.24-30.97 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-30-rtto a version that resolves this vulnerability.Fixed in 2.6.24-30.97 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-30-openvzto a version that resolves this vulnerability.Fixed in 2.6.24-30.97 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-30-lpiato a version that resolves this vulnerability.Fixed in 2.6.24-30.97 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-30-hppa64to a version that resolves this vulnerability.Fixed in 2.6.24-30.97 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-30-386to a version that resolves this vulnerability.Fixed in 2.6.24-30.97 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-30-powerpcto a version that resolves this vulnerability.Fixed in 2.6.24-30.97 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-30-powerpc64-smpto a version that resolves this vulnerability.Fixed in 2.6.24-30.97 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-30-itaniumto a version that resolves this vulnerability.Fixed in 2.6.24-30.97 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-30-hppa32to a version that resolves this vulnerability.Fixed in 2.6.24-30.97 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-30-genericto a version that resolves this vulnerability.Fixed in 2.6.24-30.97
Event History
Frequently Asked Questions
What is the severity of USN-1291-1?
The severity of USN-1291-1 is high due to potential denial of service and root privilege escalation.
How do I fix USN-1291-1?
To fix USN-1291-1, you should upgrade to kernel version 2.6.24-30.97 for Ubuntu 8.04.
What products are affected by USN-1291-1?
USN-1291-1 affects various Linux image packages for Ubuntu 8.04, including virtual, server, and standard images.
What types of attacks can exploit USN-1291-1?
USN-1291-1 can be exploited by local attackers to crash the system or gain unauthorized root access.
Is there a known CVE associated with USN-1291-1?
Yes, USN-1291-1 is associated with multiple CVEs, including CVE-2011-4077.