USN-1824-1: Linux kernel vulnerabilities
Mathias Krause discovered an information leak in the Linux kernel's ISO 9660 CDROM file system driver. A local user could exploit this flaw to examine some of the kernel's heap memory. (CVE-2012-6549) Mathias Krause discovered a flaw in xfrmuser in the Linux kernel. A local attacker with NETADMIN capability could potentially exploit this flaw to escalate privileges. (CVE-2013-1826) A buffer overflow was discovered in the Linux Kernel's USB subsystem for devices reporting the cdc-wdm class. A specially crafted USB device when plugged-in could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2013-1860) An information leak was discovered in the Linux kernel's /dev/dvb device. A local user could exploit this flaw to obtain sensitive information from the kernel's stack memory. (CVE-2013-1928) An information leak in the Linux kernel's dcb netlink interface was discovered. A local user could obtain sensitive information by examining kernel stack memory. (CVE-2013-2634)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-1824-1?
The vulnerability identified in USN-1824-1 is rated as high severity due to the potential information leak in the Linux kernel's ISO 9660 CDROM file system.
How do I fix USN-1824-1?
To resolve the issue in USN-1824-1, you should upgrade to the corrected package version linux-image-2.6.32-47.109 on Ubuntu 10.04.
What vulnerabilities are addressed in USN-1824-1?
USN-1824-1 addresses CVE-2012-6549, CVE-2013-1826, and CVE-2013-1860, which include information leak and xfrm_user flaws.
Who is affected by USN-1824-1?
Local users of Ubuntu 10.04 systems running the Linux kernel version prior to 2.6.32-47.109 are affected by USN-1824-1.
Is there a workaround for USN-1824-1?
There is no known workaround for USN-1824-1; updating to the patched versions is essential to mitigate the vulnerabilities.