USN-1992-1: Linux kernel vulnerability
Published Oct 22, 2013
·Updated
An information leak was discovered in the Linux kernel when reading broadcast messages from the notifypolicy interface of the IPSec keysocket. A local user could exploit this flaw to examine potentially sensitive information in kernel memory.
Affected Software
14 affected componentsFixes available
All of the following
ubuntu/linux-image-3.2.0-55-generic-pae<3.2.0-55.85
3.2.0-55.85
Ubuntu Ubuntu=12.04
All of the following
ubuntu/linux-image-3.2.0-55-powerpc64-smp<3.2.0-55.85
3.2.0-55.85
Ubuntu Ubuntu=12.04
All of the following
ubuntu/linux-image-3.2.0-55-highbank<3.2.0-55.85
3.2.0-55.85
Ubuntu Ubuntu=12.04
All of the following
ubuntu/linux-image-3.2.0-55-virtual<3.2.0-55.85
3.2.0-55.85
Ubuntu Ubuntu=12.04
All of the following
ubuntu/linux-image-3.2.0-55-generic<3.2.0-55.85
3.2.0-55.85
Ubuntu Ubuntu=12.04
All of the following
ubuntu/linux-image-3.2.0-55-powerpc-smp<3.2.0-55.85
3.2.0-55.85
Ubuntu Ubuntu=12.04
All of the following
ubuntu/linux-image-3.2.0-55-omap<3.2.0-55.85
3.2.0-55.85
Ubuntu Ubuntu=12.04
Event History
Oct 22, 2013
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-1992-1?
The severity of USN-1992-1 is categorized as high due to the potential information leak that can expose sensitive kernel memory.
2
How do I fix USN-1992-1?
To fix USN-1992-1, upgrade to the recommended package version 3.2.0-55.85 or later.
3
Which versions of Linux are affected by USN-1992-1?
USN-1992-1 affects Ubuntu 12.04 specifically with the Linux kernel versions prior to 3.2.0-55.85.
4
Can a remote attacker exploit USN-1992-1?
No, USN-1992-1 can only be exploited by local users with access to the system.
5
What kind of information can be leaked due to USN-1992-1?
USN-1992-1 could potentially leak sensitive information from kernel memory which may include user data.