USN-1426-1: Linux kernel (EC2) vulnerabilities
Sasha Levin discovered a flaw in the permission checking for device assignments requested via the kvm ioctl in the Linux kernel. A local user could use this flaw to crash the system causing a denial of service. (CVE-2011-4347) Stephan Bärwolf discovered a flaw in the KVM (kernel-based virtual machine) subsystem of the Linux kernel. A local unprivileged user can crash use this flaw to crash VMs causing a deny of service. (CVE-2012-0045) A flaw was discovered in the Linux kernel's cifs file system. An unprivileged local user could exploit this flaw to crash the system leading to a denial of service. (CVE-2012-1090) H. Peter Anvin reported a flaw in the Linux kernel that could crash the system. A local user could exploit this flaw to crash the system. (CVE-2012-1097) Tetsuo Handa reported a flaw in the OOM (out of memory) killer of the Linux kernel. A local unprivileged user can exploit this flaw to cause system unstability and denial of services. (CVE-2012-4398)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-1426-1?
The severity of USN-1426-1 is considered high due to its potential to cause a denial of service.
How do I fix USN-1426-1?
To fix USN-1426-1, users need to upgrade their Linux kernel to version 2.6.32-345.47 or later.
Which versions of Ubuntu are affected by USN-1426-1?
USN-1426-1 affects Ubuntu 10.04 with the linux-image-2.6.32-345-ec2 package.
What type of vulnerability is described in USN-1426-1?
USN-1426-1 describes a flaw in permission checking for device assignments which could be exploited to crash the system.
Who discovered the vulnerability in USN-1426-1?
The vulnerability in USN-1426-1 was discovered by Sasha Levin and Stephan Bärwolf.