USN-1294-1: Linux kernel (Oneiric backport) vulnerabilities
Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. (CVE-2011-1162) Vasiliy Kulikov discovered that taskstats did not enforce access restrictions. A local attacker could exploit this to read certain information, leading to a loss of privacy. (CVE-2011-2494) Qianfeng Zhang discovered that the bridge networking interface incorrectly handled certain network packets. A remote attacker could exploit this to crash the system, leading to a denial of service. (CVE-2011-2942) Yasuaki Ishimatsu discovered a flaw in the kernel's clock implementation. A local unprivileged attacker could exploit this causing a denial of service. (CVE-2011-3209) Zheng Liu discovered a flaw in how the ext4 filesystem splits extents. A local unprivileged attacker could exploit this to crash the system, leading to a denial of service. (CVE-2011-3638) Scot Doyle discovered that the bridge networking interface incorrectly handled certain network packets. A remote attacker could exploit this to crash the system, leading to a denial of service. (CVE-2011-4087) A bug was found in the way headroom check was performed in udp6ufofragment() function. A remote attacker could use this flaw to crash the system. (CVE-2011-4326)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-1294-1?
USN-1294-1 is classified as a high severity vulnerability due to the potential for local users to access sensitive information.
How do I fix USN-1294-1?
To fix USN-1294-1, upgrade to the updated Ubuntu package version 3.0.0-13.22~lucid1 for your specific kernel.
What types of systems are affected by USN-1294-1?
USN-1294-1 affects Ubuntu version 10.04 systems using the specified kernel packages.
Can a remote attacker exploit USN-1294-1?
No, USN-1294-1 is only exploitable by local, unprivileged users on the system.
What kind of data is leaked due to USN-1294-1?
USN-1294-1 allows local users to read results of previous TPM commands, potentially leaking sensitive security-related data.