- Vulnerability/
- USN-1837-1
USN-1837-1: Linux kernel vulnerabilities
First published: Fri May 24 2013(Updated: )
An information leak was discovered in the Linux kernel's tkill and tgkill system calls when used from compat processes. A local user could exploit this flaw to examine potentially sensitive kernel memory. (CVE-2013-2141) A flaw was discovered in the Linux kernel's perf events subsystem for Intel Sandy Bridge and Ivy Bridge processors. A local user could exploit this flaw to cause a denial of service (system crash). (CVE-2013-2146) An information leak was discovered in the Linux kernel's crypto API. A local user could exploit this flaw to examine potentially sensitive information from the kernel's stack memory. (CVE-2013-3076) An information leak was discovered in the Linux kernel's rcvmsg path for ATM (Asynchronous Transfer Mode). A local user could exploit this flaw to examine potentially sensitive information from the kernel's stack memory. (CVE-2013-3222) An information leak was discovered in the Linux kernel's recvmsg path for ax25 address family. A local user could exploit this flaw to examine potentially sensitive information from the kernel's stack memory. (CVE-2013-3223) An information leak was discovered in the Linux kernel's recvmsg path for the bluetooth address family. A local user could exploit this flaw to examine potentially sensitive information from the kernel's stack memory. (CVE-2013-3224) An information leak was discovered in the Linux kernel's bluetooth rfcomm protocol support. A local user could exploit this flaw to examine potentially sensitive information from the kernel's stack memory. (CVE-2013-3225) An information leak was discovered in the Linux kernel's bluetooth SCO sockets implementation. A local user could exploit this flaw to examine potentially sensitive information from the kernel's stack memory. (CVE-2013-3226) An information leak was discovered in the Linux kernel's CAIF protocol implementation. A local user could exploit this flaw to examine potentially sensitive information from the kernel's stack memory. (CVE-2013-3227) An information leak was discovered in the Linux kernel's IRDA (infrared) support subsystem. A local user could exploit this flaw to examine potentially sensitive information from the kernel's stack memory. (CVE-2013-3228) An information leak was discovered in the Linux kernel's s390 - z/VM support. A local user could exploit this flaw to examine potentially sensitive information from the kernel's stack memory. (CVE-2013-3229) An information leak was discovered in the Linux kernel's l2tp (Layer Two Tunneling Protocol) implementation. A local user could exploit this flaw to examine potentially sensitive information from the kernel's stack memory. (CVE-2013-3230) An information leak was discovered in the Linux kernel's llc (Logical Link Layer 2) support. A local user could exploit this flaw to examine potentially sensitive information from the kernel's stack memory. (CVE-2013-3231) An information leak was discovered in the Linux kernel's receive message handling for the netrom address family. A local user could exploit this flaw to obtain sensitive information from the kernel's stack memory. (CVE-2013-3232) An information leak was discovered in the Linux kernel's nfc (near field communication) support. A local user could exploit this flaw to examine potentially sensitive information from the kernel's stack memory. (CVE-2013-3233) An information leak was discovered in the Linux kernel's Rose X.25 protocol layer. A local user could exploit this flaw to examine potentially sensitive information from the kernel's stack memory. (CVE-2013-3234) An information leak was discovered in the Linux kernel's TIPC (Transparent Inter Process Communication) protocol implementation. A local user could exploit this flaw to examine potentially sensitive information from the kernel's stack memory. (CVE-2013-3235)
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| ubuntu/linux-image-3.8.0-22-generic | <3.8.0-22.33 | 3.8.0-22.33 |
| Ubuntu gir1.2-packagekitglib-1.0 | =13.04 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ubuntu.com/security/CVE-2013-2141
- https://ubuntu.com/security/CVE-2013-2146
- https://ubuntu.com/security/CVE-2013-3076
- https://ubuntu.com/security/CVE-2013-3222
- https://ubuntu.com/security/CVE-2013-3223
- https://ubuntu.com/security/CVE-2013-3224
- https://ubuntu.com/security/CVE-2013-3225
- https://ubuntu.com/security/CVE-2013-3226
- https://ubuntu.com/security/CVE-2013-3227
- https://ubuntu.com/security/CVE-2013-3228
- https://ubuntu.com/security/CVE-2013-3229
- https://ubuntu.com/security/CVE-2013-3230
- https://ubuntu.com/security/CVE-2013-3231
- https://ubuntu.com/security/CVE-2013-3232
- https://ubuntu.com/security/CVE-2013-3233
- https://ubuntu.com/security/CVE-2013-3234
- https://ubuntu.com/security/CVE-2013-3235
- https://ubuntu.com/security/notices/USN-1839-1
- https://ubuntu.com/security/notices/USN-1833-1
- https://ubuntu.com/security/notices/USN-1883-1
- https://ubuntu.com/security/notices/USN-1900-1
- https://ubuntu.com/security/notices/USN-1880-1
- https://ubuntu.com/security/notices/USN-1881-1
- https://ubuntu.com/security/notices/USN-1882-1
- https://ubuntu.com/security/notices/USN-1849-1
- https://ubuntu.com/security/notices/USN-1899-1
- https://ubuntu.com/security/notices/USN-1878-1
- https://ubuntu.com/security/notices/USN-1879-1
- https://ubuntu.com/security/notices/USN-1876-1
- https://ubuntu.com/security/notices/USN-1877-1
- https://launchpad.net/ubuntu/+source/linux/3.8.0-22.33
- https://ubuntu.com/security/notices/USN-1837-1 (Advisory)
Child vulnerabilities
(Contains the following vulnerabilities)
Frequently Asked Questions
What is the severity of USN-1837-1?
The severity of USN-1837-1 is classified as medium due to the potential information leak and its impact on system security.
How do I fix USN-1837-1?
To address USN-1837-1, you should upgrade to the updated package version linux-image-3.8.0-22.33 on Ubuntu 13.04.
What vulnerability does USN-1837-1 address?
USN-1837-1 addresses an information leak vulnerability in the Linux kernel's tkill and tgkill system calls.
Who is affected by USN-1837-1?
Users running Ubuntu 13.04 with the linux-image-3.8.0-22-generic package are affected by USN-1837-1.
Can USN-1837-1 be exploited remotely?
No, USN-1837-1 requires local access to the system for exploitation.
- agent/severity
- agent/references
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/title
- agent/description
- agent/event
- agent/trending
- agent/source
- agent/softwarecombine
- agent/tags
- collector/usn
- source/Ubuntu
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- package-manager/ubuntu
- vendor/ubuntu
- canonical/ubuntu gir1.2-packagekitglib-1.0
- version/ubuntu gir1.2-packagekitglib-1.0/13.04