- Vulnerability/
- USN-1364-1
USN-1364-1: Linux kernel (OMAP4) vulnerabilities
First published: Mon Feb 13 2012(Updated: )
A bug was discovered in the Linux kernel's calculation of OOM (Out of memory) scores, that would result in the wrong process being killed. A user could use this to kill the process with the highest OOM score, even if that process belongs to another user or the system. (CVE-2011-4097) A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. (CVE-2012-0038) Andy Whitcroft discovered a that the Overlayfs filesystem was not doing the extended permission checks needed by cgroups and Linux Security Modules (LSMs). A local user could exploit this to by-pass security policy and access files that should not be accessible. (CVE-2012-0055) Jüri Aedla discovered that the kernel incorrectly handled /proc//mem permissions. A local attacker could exploit this and gain root privileges. (CVE-2012-0056) A flaw was found in the linux kernels IPv4 IGMP query processing. A remote attacker could exploit this to cause a denial of service. (CVE-2012-0207)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-3.0.0-1207-omap4 | <3.0.0-1207.16 | 3.0.0-1207.16 |
| Ubuntu gir1.2-packagekitglib-1.0 | =11.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2011-4097
- https://ubuntu.com/security/CVE-2012-0038
- https://ubuntu.com/security/CVE-2012-0055
- https://ubuntu.com/security/CVE-2012-0056
- https://ubuntu.com/security/CVE-2012-0207
- https://ubuntu.com/security/notices/USN-1380-1
- https://ubuntu.com/security/notices/USN-1384-1
- https://ubuntu.com/security/notices/USN-1363-1
- https://ubuntu.com/security/notices/USN-1386-1
- https://ubuntu.com/security/notices/USN-1362-1
- https://ubuntu.com/security/notices/USN-1356-1
- https://ubuntu.com/security/notices/USN-1388-1
- https://ubuntu.com/security/notices/USN-1389-1
- https://ubuntu.com/security/notices/USN-1387-1
- https://ubuntu.com/security/notices/USN-1391-1
- https://ubuntu.com/security/notices/USN-1394-1
- https://ubuntu.com/security/notices/USN-1361-1
- https://ubuntu.com/security/notices/USN-1342-1
- https://ubuntu.com/security/notices/USN-1336-1
- https://launchpad.net/ubuntu/+source/linux-ti-omap4/3.0.0-1207.16
- https://ubuntu.com/security/notices/USN-1364-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the severity of USN-1364-1?
The USN-1364-1 vulnerability has been classified as a high severity issue due to its potential to allow unauthorized process termination.
How do I fix USN-1364-1?
You can fix USN-1364-1 by upgrading to the recommended kernel version 3.0.0-1207.16 or later.
What systems are affected by USN-1364-1?
USN-1364-1 affects Ubuntu version 11.10 running the linux-image-3.0.0-1207-omap4 package.
What is the nature of the vulnerability in USN-1364-1?
The vulnerability in USN-1364-1 is related to incorrect calculation of OOM scores that allows a user to kill processes belonging to other users.
Is there a workaround for USN-1364-1?
There are no effective workarounds for USN-1364-1, so applying the security update is strongly recommended.
- agent/type
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/description
- agent/title
- agent/references
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu gir1.2-packagekitglib-1.0
- version/ubuntu gir1.2-packagekitglib-1.0/11.10