USN-1917-1: Linux kernel vulnerability
Kees Cook discovered a format string vulnerability in the Broadcom B43 wireless driver for the Linux kernel. A local user could exploit this flaw to gain administrative privileges.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-3.5.0-37-powerpc64-smpto a version that resolves this vulnerability.Fixed in 3.5.0-37.58 - Upgrade
Upgrade
ubuntu/linux-image-3.5.0-37-highbankto a version that resolves this vulnerability.Fixed in 3.5.0-37.58 - Upgrade
Upgrade
ubuntu/linux-image-3.5.0-37-omapto a version that resolves this vulnerability.Fixed in 3.5.0-37.58 - Upgrade
Upgrade
ubuntu/linux-image-3.5.0-37-powerpc-smpto a version that resolves this vulnerability.Fixed in 3.5.0-37.58 - Upgrade
Upgrade
ubuntu/linux-image-3.5.0-37-genericto a version that resolves this vulnerability.Fixed in 3.5.0-37.58
Event History
Frequently Asked Questions
What is the severity of USN-1917-1?
The severity of USN-1917-1 is critically high due to the potential for local users to gain administrative privileges.
How do I fix USN-1917-1?
To fix USN-1917-1, upgrade the affected packages to version 3.5.0-37.58 or later.
Which Ubuntu versions are affected by USN-1917-1?
USN-1917-1 affects Ubuntu version 12.10.
What type of vulnerability is described in USN-1917-1?
USN-1917-1 describes a format string vulnerability in the Broadcom B43 wireless driver.
Can a remote attacker exploit USN-1917-1?
No, USN-1917-1 requires local access for exploitation.