USN-1421-1: Linux kernel (Maverick backport) vulnerabilities
Sasha Levin discovered a flaw in the permission checking for device assignments requested via the kvm ioctl in the Linux kernel. A local user could use this flaw to crash the system causing a denial of service. (CVE-2011-4347) Stephan Bärwolf discovered a flaw in the KVM (kernel-based virtual machine) subsystem of the Linux kernel. A local unprivileged user can crash use this flaw to crash VMs causing a deny of service. (CVE-2012-0045) H. Peter Anvin reported a flaw in the Linux kernel that could crash the system. A local user could exploit this flaw to crash the system. (CVE-2012-1097) A flaw was discovered in the Linux kernel's cgroups subset. A local attacker could use this flaw to crash the system. (CVE-2012-1146)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-1421-1?
The severity of USN-1421-1 is classified as high due to the potential for local users to crash the system.
How do I fix USN-1421-1?
To fix USN-1421-1, you should upgrade to the patched kernel version 2.6.35-32.68~lucid1 or later.
Which systems are affected by USN-1421-1?
USN-1421-1 affects Ubuntu 10.04 which includes specific kernel packages like linux-image-2.6.35-32-virtual and linux-image-2.6.35-32-server.
Can USN-1421-1 be exploited remotely?
No, USN-1421-1 requires local user access to exploit the vulnerability.
What kind of vulnerability is USN-1421-1?
USN-1421-1 is a denial of service vulnerability due to flawed permission checking in the KVM ioctl.