First published: Fri Sep 21 2012(Updated: )
A flaw was discovered in the Linux kernel's KVM (kernel virtual machine). An administrative user in the guest OS could leverage this flaw to cause a denial of service in the host OS. (CVE-2012-2121) Ben Hutchings reported a flaw in the Linux kernel with some network drivers that support TSO (TCP segment offload). A local or peer user could exploit this flaw to to cause a denial of service. (CVE-2012-3412) Jay Fenlason and Doug Ledford discovered a bug in the Linux kernel implementation of RDS sockets. A local unprivileged user could potentially use this flaw to read privileged information from the kernel. (CVE-2012-3430) A flaw was discovered in the madvise feature of the Linux kernel's memory subsystem. An unprivileged local use could exploit the flaw to cause a denial of service (crash the system). (CVE-2012-3511)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-2.6.38-1209-omap4 | <2.6.38-1209.26 | 2.6.38-1209.26 |
Ubuntu gir1.2-packagekitglib-1.0 | =11.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Contains the following vulnerabilities)
USN-1577-1 is classified as a denial of service vulnerability that could affect the stability of the host operating system.
To fix USN-1577-1, update the linux-image-2.6.38-1209-omap4 package to version 2.6.38-1209.26 or later.
Users running Ubuntu 11.04 with the linux-image-2.6.38-1209-omap4 package are affected by USN-1577-1.
The USN-1577-1 vulnerability is caused by a flaw in the Linux kernel's KVM that allows a guest OS administrative user to launch a denial of service attack against the host OS.
You can determine if you are vulnerable to USN-1577-1 by checking if you are using an affected version of the linux-image-2.6.38-1209-omap4 package on Ubuntu 11.04.