USN-1574-1: Linux kernel (Natty backport) vulnerabilities
A flaw was found in how the Linux kernel passed the replacement session keyring to a child process. An unprivileged local user could exploit this flaw to cause a denial of service (panic). (CVE-2012-2745) Ben Hutchings reported a flaw in the Linux kernel with some network drivers that support TSO (TCP segment offload). A local or peer user could exploit this flaw to to cause a denial of service. (CVE-2012-3412) Jay Fenlason and Doug Ledford discovered a bug in the Linux kernel implementation of RDS sockets. A local unprivileged user could potentially use this flaw to read privileged information from the kernel. (CVE-2012-3430) A flaw was discovered in the madvise feature of the Linux kernel's memory subsystem. An unprivileged local use could exploit the flaw to cause a denial of service (crash the system). (CVE-2012-3511)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-1574-1?
The severity of USN-1574-1 is considered to be high due to the potential for denial of service via a kernel panic.
How do I fix USN-1574-1?
To fix USN-1574-1, you should update your system to the recommended version of the Linux kernel, specifically linux-image-2.6.38-16.67~lucid1.
Which systems are affected by USN-1574-1?
USN-1574-1 affects Ubuntu 10.04 systems running specific versions of the Linux kernel.
What could an attacker exploit in USN-1574-1?
An unprivileged local user could exploit the flaw in USN-1574-1 to cause a denial of service by triggering a kernel panic.
When was the vulnerability reported in USN-1574-1?
The vulnerability was reported by Ben Hutchings and is associated with the CVE identifier CVE-2012-2745.