USN-1535-1: Linux kernel vulnerabilities
An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface (which is not available to unprivileged users until granted by a root user) could exploit this flaw to crash the system or potential gain administrative privileges. (CVE-2012-2136) An error was discovered in the Linux kernel's memory subsystem (hugetlb). An unprivileged local user could exploit this flaw to cause a denial of service (crash the system). (CVE-2012-2390)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-1535-1?
The severity of USN-1535-1 is classified as high due to the potential for local users to crash the system or escalate privileges.
How do I fix USN-1535-1?
To fix USN-1535-1, you must update your system to the latest kernel version provided for Ubuntu 10.04.
What systems are affected by USN-1535-1?
USN-1535-1 affects Ubuntu 10.04 and its kernel variants including the 2.6.32-42 series.
Is there a workaround for USN-1535-1?
A potential workaround for USN-1535-1 is to limit access to the TUN/TAP interface to only trusted users.
What does USN-1535-1 address?
USN-1535-1 addresses a vulnerability in the Linux kernel's network TUN/TAP device implementation, allowing crashes and privilege escalation.