USN-1425-1: Linux kernel vulnerabilities
Sasha Levin discovered a flaw in the permission checking for device assignments requested via the kvm ioctl in the Linux kernel. A local user could use this flaw to crash the system causing a denial of service. (CVE-2011-4347) Stephan Bärwolf discovered a flaw in the KVM (kernel-based virtual machine) subsystem of the Linux kernel. A local unprivileged user can crash use this flaw to crash VMs causing a deny of service. (CVE-2012-0045) A flaw was discovered in the Linux kernel's cifs file system. An unprivileged local user could exploit this flaw to crash the system leading to a denial of service. (CVE-2012-1090) H. Peter Anvin reported a flaw in the Linux kernel that could crash the system. A local user could exploit this flaw to crash the system. (CVE-2012-1097) Tetsuo Handa reported a flaw in the OOM (out of memory) killer of the Linux kernel. A local unprivileged user can exploit this flaw to cause system unstability and denial of services. (CVE-2012-4398)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-1425-1?
The severity of USN-1425-1 is categorized as a denial of service risk due to permission checking flaws in the Linux kernel.
How do I fix USN-1425-1?
To fix USN-1425-1, update your system to Linux kernel version 2.6.32-41.88 or later.
Which systems are affected by USN-1425-1?
USN-1425-1 affects Ubuntu 10.04 systems running specific versions of the Linux kernel.
What causes the USN-1425-1 vulnerability?
The USN-1425-1 vulnerability is caused by flawed permission checks for device assignment requests in the KVM ioctl.
Can a remote attacker exploit USN-1425-1?
No, USN-1425-1 is a local vulnerability that requires a local user to exploit it, leading to a denial of service.