USN-1738-1: Linux kernel (Oneiric backport) vulnerability
Suleiman Souhlal, Salman Qazi, Aaron Durbin and Michael Davidson discovered a race condition in the Linux kernel's ptrace syscall. An unprivileged local attacker could exploit this flaw to run programs as an administrator.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-3.0.0-31-serverto a version that resolves this vulnerability.Fixed in 3.0.0-31.49~lucid1 - Upgrade
Upgrade
ubuntu/linux-image-3.0.0-31-genericto a version that resolves this vulnerability.Fixed in 3.0.0-31.49~lucid1 - Upgrade
Upgrade
ubuntu/linux-image-3.0.0-31-virtualto a version that resolves this vulnerability.Fixed in 3.0.0-31.49~lucid1 - Upgrade
Upgrade
ubuntu/linux-image-3.0.0-31-generic-paeto a version that resolves this vulnerability.Fixed in 3.0.0-31.49~lucid1
Event History
Frequently Asked Questions
What is the severity of USN-1738-1?
The severity of USN-1738-1 is critical due to its potential for local privilege escalation.
How can USN-1738-1 be exploited?
USN-1738-1 can be exploited by an unprivileged local attacker who uses the ptrace syscall to execute programs with elevated privileges.
What versions of Ubuntu are affected by USN-1738-1?
USN-1738-1 affects Ubuntu 10.04 with specific versions of the linux-image packages.
How do I fix USN-1738-1?
To fix USN-1738-1, upgrade to linux-image-3.0.0-31.49~lucid1 or higher.
Who discovered the vulnerability in USN-1738-1?
The vulnerability in USN-1738-1 was discovered by Suleiman Souhlal, Salman Qazi, Aaron Durbin, and Michael Davidson.