Advisory Published

USN-1646-1: Linux kernel vulnerabilities

First published: Fri Nov 30 2012(Updated: )

Brad Spengler discovered a flaw in the Linux kernel's uname system call. An unprivileged user could exploit this flaw to read kernel stack memory. (CVE-2012-0957) Rodrigo Freire discovered a flaw in the Linux kernel's TCP illinois congestion control algorithm. A local attacker could use this to cause a denial of service. (CVE-2012-4565) Mathias Krause discovered a flaw in the Linux kernel's XFRM netlink interface. A local user with the NET_ADMIN capability could exploit this flaw to leak the contents of kernel memory. (CVE-2012-6536) Mathias Krause discovered several errors in the Linux kernel's xfrm_user implementation. A local attacker could exploit these flaws to examine parts of kernel memory. (CVE-2012-6537) Mathias Krause discovered an information leak in the Linux kernel's xfrm_user copy_to_user_auth function. A local user could exploit this flaw to examine parts of kernel heap memory. (CVE-2012-6538) A flaw was discovered in the Linux kernels handling of memory ranges with PROT_NONE when transparent hugepages are in use. An unprivileged local user could exploit this flaw to cause a denial of service (crash the system). (CVE-2013-0309) Mathias Krause discovered a flaw in xfrm_user in the Linux kernel. A local attacker with NET_ADMIN capability could potentially exploit this flaw to escalate privileges. (CVE-2013-1826)

Affected SoftwareAffected VersionHow to fix
All of
ubuntu/linux-image-3.5.0-19-highbank<3.5.0-19.30
3.5.0-19.30
Ubuntu Ubuntu=12.10
All of
ubuntu/linux-image-3.5.0-19-omap<3.5.0-19.30
3.5.0-19.30
Ubuntu Ubuntu=12.10
All of
ubuntu/linux-image-3.5.0-19-generic<3.5.0-19.30
3.5.0-19.30
Ubuntu Ubuntu=12.10
All of
ubuntu/linux-image-3.5.0-19-powerpc-smp<3.5.0-19.30
3.5.0-19.30
Ubuntu Ubuntu=12.10
All of
ubuntu/linux-image-3.5.0-19-powerpc64-smp<3.5.0-19.30
3.5.0-19.30
Ubuntu Ubuntu=12.10

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Child vulnerabilities

(Contains the following vulnerabilities)

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203