USN-1454-1: Linux kernel vulnerability

Published May 25, 2012
·
Updated

A flaw was found in the Linux's kernels ext4 file system when mounted with a journal. A local, unprivileged user could exploit this flaw to cause a denial of service.

Affected Software

36 affected componentsFixes available
All of the following
ubuntu/linux-image-2.6.24-31-powerpc<2.6.24-31.101
2.6.24-31.101
Ubuntu Ubuntu=8.04
All of the following
ubuntu/linux-image-2.6.24-31-sparc64<2.6.24-31.101
2.6.24-31.101
Ubuntu Ubuntu=8.04
All of the following
ubuntu/linux-image-2.6.24-31-virtual<2.6.24-31.101
2.6.24-31.101
Ubuntu Ubuntu=8.04
All of the following
ubuntu/linux-image-2.6.24-31-server<2.6.24-31.101
2.6.24-31.101
Ubuntu Ubuntu=8.04
All of the following
ubuntu/linux-image-2.6.24-31-hppa32<2.6.24-31.101
2.6.24-31.101
Ubuntu Ubuntu=8.04
All of the following
ubuntu/linux-image-2.6.24-31-lpiacompat<2.6.24-31.101
2.6.24-31.101
Ubuntu Ubuntu=8.04
All of the following
ubuntu/linux-image-2.6.24-31-rt<2.6.24-31.101
2.6.24-31.101
Ubuntu Ubuntu=8.04
All of the following
ubuntu/linux-image-2.6.24-31-lpia<2.6.24-31.101
2.6.24-31.101
Ubuntu Ubuntu=8.04
All of the following
ubuntu/linux-image-2.6.24-31-generic<2.6.24-31.101
2.6.24-31.101
Ubuntu Ubuntu=8.04
All of the following
ubuntu/linux-image-2.6.24-31-hppa64<2.6.24-31.101
2.6.24-31.101
Ubuntu Ubuntu=8.04
All of the following
ubuntu/linux-image-2.6.24-31-mckinley<2.6.24-31.101
2.6.24-31.101
Ubuntu Ubuntu=8.04
All of the following
ubuntu/linux-image-2.6.24-31-xen<2.6.24-31.101
2.6.24-31.101
Ubuntu Ubuntu=8.04
All of the following
ubuntu/linux-image-2.6.24-31-powerpc64-smp<2.6.24-31.101
2.6.24-31.101
Ubuntu Ubuntu=8.04
All of the following
ubuntu/linux-image-2.6.24-31-itanium<2.6.24-31.101
2.6.24-31.101
Ubuntu Ubuntu=8.04
All of the following
ubuntu/linux-image-2.6.24-31-openvz<2.6.24-31.101
2.6.24-31.101
Ubuntu Ubuntu=8.04
All of the following
ubuntu/linux-image-2.6.24-31-386<2.6.24-31.101
2.6.24-31.101
Ubuntu Ubuntu=8.04
All of the following
ubuntu/linux-image-2.6.24-31-sparc64-smp<2.6.24-31.101
2.6.24-31.101
Ubuntu Ubuntu=8.04
All of the following
ubuntu/linux-image-2.6.24-31-powerpc-smp<2.6.24-31.101
2.6.24-31.101
Ubuntu Ubuntu=8.04

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade ubuntu/linux-image-2.6.24-31-powerpc to a version that resolves this vulnerability.

    Fixed in 2.6.24-31.101
  2. Upgrade

    Upgrade ubuntu/linux-image-2.6.24-31-sparc64 to a version that resolves this vulnerability.

    Fixed in 2.6.24-31.101
  3. Upgrade

    Upgrade ubuntu/linux-image-2.6.24-31-virtual to a version that resolves this vulnerability.

    Fixed in 2.6.24-31.101
  4. Upgrade

    Upgrade ubuntu/linux-image-2.6.24-31-server to a version that resolves this vulnerability.

    Fixed in 2.6.24-31.101
  5. Upgrade

    Upgrade ubuntu/linux-image-2.6.24-31-hppa32 to a version that resolves this vulnerability.

    Fixed in 2.6.24-31.101
  6. Upgrade

    Upgrade ubuntu/linux-image-2.6.24-31-lpiacompat to a version that resolves this vulnerability.

    Fixed in 2.6.24-31.101
  7. Upgrade

    Upgrade ubuntu/linux-image-2.6.24-31-rt to a version that resolves this vulnerability.

    Fixed in 2.6.24-31.101
  8. Upgrade

    Upgrade ubuntu/linux-image-2.6.24-31-lpia to a version that resolves this vulnerability.

    Fixed in 2.6.24-31.101
  9. Upgrade

    Upgrade ubuntu/linux-image-2.6.24-31-generic to a version that resolves this vulnerability.

    Fixed in 2.6.24-31.101
  10. Upgrade

    Upgrade ubuntu/linux-image-2.6.24-31-hppa64 to a version that resolves this vulnerability.

    Fixed in 2.6.24-31.101
  11. Upgrade

    Upgrade ubuntu/linux-image-2.6.24-31-mckinley to a version that resolves this vulnerability.

    Fixed in 2.6.24-31.101
  12. Upgrade

    Upgrade ubuntu/linux-image-2.6.24-31-xen to a version that resolves this vulnerability.

    Fixed in 2.6.24-31.101
  13. Upgrade

    Upgrade ubuntu/linux-image-2.6.24-31-powerpc64-smp to a version that resolves this vulnerability.

    Fixed in 2.6.24-31.101
  14. Upgrade

    Upgrade ubuntu/linux-image-2.6.24-31-itanium to a version that resolves this vulnerability.

    Fixed in 2.6.24-31.101
  15. Upgrade

    Upgrade ubuntu/linux-image-2.6.24-31-openvz to a version that resolves this vulnerability.

    Fixed in 2.6.24-31.101
  16. Upgrade

    Upgrade ubuntu/linux-image-2.6.24-31-386 to a version that resolves this vulnerability.

    Fixed in 2.6.24-31.101
  17. Upgrade

    Upgrade ubuntu/linux-image-2.6.24-31-sparc64-smp to a version that resolves this vulnerability.

    Fixed in 2.6.24-31.101
  18. Upgrade

    Upgrade ubuntu/linux-image-2.6.24-31-powerpc-smp to a version that resolves this vulnerability.

    Fixed in 2.6.24-31.101

Event History

May 25, 2012
Advisory Published
via Ubuntu·12:00 AM

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of USN-1454-1?

USN-1454-1 has been identified as a denial of service vulnerability affecting the ext4 file system in Linux.

2

How do I fix USN-1454-1?

To resolve the issue related to USN-1454-1, update your Linux kernel to version 2.6.24-31.101 or later.

3

Which versions of Ubuntu are affected by USN-1454-1?

USN-1454-1 affects Ubuntu version 8.04 and its various kernel packages.

4

Can a remote attacker exploit USN-1454-1?

No, USN-1454-1 can only be exploited by local, unprivileged users to cause a denial of service.

5

What should I do if I cannot update my system for USN-1454-1?

If unable to update, consider restricting user access to prevent exploitation of USN-1454-1.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203