First published: Fri Sep 21 2012(Updated: )
Ben Hutchings reported a flaw in the Linux kernel with some network drivers that support TSO (TCP segment offload). A local or peer user could exploit this flaw to to cause a denial of service. (CVE-2012-3412) Jay Fenlason and Doug Ledford discovered a bug in the Linux kernel implementation of RDS sockets. A local unprivileged user could potentially use this flaw to read privileged information from the kernel. (CVE-2012-3430) Mathias Krause discovered an information leak in the Linux kernel's TUN/TAP device driver. A local user could exploit this flaw to examine part of the kernel's stack memory. (CVE-2012-6547) A flaw was discovered in the requeuing of futexes in the Linux kernel. A local user could exploit this flaw to cause a denial of service (system crash) or possibly have other unspecified impact. (CVE-2012-6647) A flaw was found in Linux kernel's validation of CIPSO (Common IP Security Option) options set from userspace. A local user that can set a socket's CIPSO options could exploit this flaw to cause a denial of service (crash the system). (CVE-2013-0310)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-3.2.0-31-highbank | <3.2.0-31.50 | 3.2.0-31.50 |
Ubuntu 22.04 LTS | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-31-omap | <3.2.0-31.50 | 3.2.0-31.50 |
Ubuntu 22.04 LTS | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-31-generic-pae | <3.2.0-31.50 | 3.2.0-31.50 |
Ubuntu 22.04 LTS | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-31-powerpc64-smp | <3.2.0-31.50 | 3.2.0-31.50 |
Ubuntu 22.04 LTS | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-31-virtual | <3.2.0-31.50 | 3.2.0-31.50 |
Ubuntu 22.04 LTS | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-31-generic | <3.2.0-31.50 | 3.2.0-31.50 |
Ubuntu 22.04 LTS | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-31-powerpc-smp | <3.2.0-31.50 | 3.2.0-31.50 |
Ubuntu 22.04 LTS | =12.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Contains the following vulnerabilities)
USN-1579-1 is classified as a medium severity vulnerability that can lead to denial of service.
To mitigate the risk, ensure that you update your Linux kernel to version 3.2.0-31.50 or later.
The vulnerability impacts Ubuntu 12.04 systems with specific Linux kernel packages.
Yes, a local or peer user can exploit this vulnerability to cause a denial of service.
USN-1579-1 is a kernel vulnerability related to TCP segment offload in network drivers.