USN-1325-1: Linux kernel (OMAP4) vulnerabilities
Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. (CVE-2011-1162) Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel oops. (CVE-2011-2203) Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service. (CVE-2011-3353) A flaw was found in the b43 driver in the Linux kernel. An attacker could use this flaw to cause a denial of service if the system has an active wireless interface using the b43 driver. (CVE-2011-3359) A flaw was found in how the Linux kernel handles user-defined key types. An unprivileged local user could exploit this to crash the system. (CVE-2011-4110)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-1325-1?
The severity of USN-1325-1 is categorized as a medium risk due to the potential information leak from the TPM data.
How do I fix USN-1325-1?
To fix USN-1325-1, you should update your system to the patched version of the linux-image-2.6.35-903-omap4 package.
Who discovered the vulnerabilities in USN-1325-1?
The vulnerabilities in USN-1325-1 were discovered by Peter Huewe and Clement Lecigne.
Which versions of Ubuntu are affected by USN-1325-1?
USN-1325-1 affects Ubuntu 10.10 running the linux-image-2.6.35-903-omap4 package before version 2.6.35-903.29.
What kind of attack does USN-1325-1 allow?
USN-1325-1 allows a local, unprivileged user to exploit an information leak and read results from a previous TPM command.