USN-1579-1: Linux kernel vulnerabilities
Ben Hutchings reported a flaw in the Linux kernel with some network drivers that support TSO (TCP segment offload). A local or peer user could exploit this flaw to to cause a denial of service. (CVE-2012-3412) Jay Fenlason and Doug Ledford discovered a bug in the Linux kernel implementation of RDS sockets. A local unprivileged user could potentially use this flaw to read privileged information from the kernel. (CVE-2012-3430) Mathias Krause discovered an information leak in the Linux kernel's TUN/TAP device driver. A local user could exploit this flaw to examine part of the kernel's stack memory. (CVE-2012-6547) A flaw was discovered in the requeuing of futexes in the Linux kernel. A local user could exploit this flaw to cause a denial of service (system crash) or possibly have other unspecified impact. (CVE-2012-6647) A flaw was found in Linux kernel's validation of CIPSO (Common IP Security Option) options set from userspace. A local user that can set a socket's CIPSO options could exploit this flaw to cause a denial of service (crash the system). (CVE-2013-0310)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-1579-1?
USN-1579-1 is classified as a medium severity vulnerability that can lead to denial of service.
How can I mitigate the risk associated with USN-1579-1?
To mitigate the risk, ensure that you update your Linux kernel to version 3.2.0-31.50 or later.
Which systems are affected by USN-1579-1?
The vulnerability impacts Ubuntu 12.04 systems with specific Linux kernel packages.
Is there an exploit possibility for USN-1579-1?
Yes, a local or peer user can exploit this vulnerability to cause a denial of service.
What type of vulnerability is USN-1579-1?
USN-1579-1 is a kernel vulnerability related to TCP segment offload in network drivers.