First published: Tue Oct 22 2013(Updated: )
An information leak was discovered in the Linux kernel when reading broadcast messages from the notify_policy interface of the IPSec key_socket. A local user could exploit this flaw to examine potentially sensitive information in kernel memory.
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-3.2.0-55-generic-pae | <3.2.0-55.85 | 3.2.0-55.85 |
Ubuntu 22.04 LTS | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-55-powerpc64-smp | <3.2.0-55.85 | 3.2.0-55.85 |
Ubuntu 22.04 LTS | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-55-highbank | <3.2.0-55.85 | 3.2.0-55.85 |
Ubuntu 22.04 LTS | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-55-virtual | <3.2.0-55.85 | 3.2.0-55.85 |
Ubuntu 22.04 LTS | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-55-generic | <3.2.0-55.85 | 3.2.0-55.85 |
Ubuntu 22.04 LTS | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-55-powerpc-smp | <3.2.0-55.85 | 3.2.0-55.85 |
Ubuntu 22.04 LTS | =12.04 | |
All of | ||
ubuntu/linux-image-3.2.0-55-omap | <3.2.0-55.85 | 3.2.0-55.85 |
Ubuntu 22.04 LTS | =12.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of USN-1992-1 is categorized as high due to the potential information leak that can expose sensitive kernel memory.
To fix USN-1992-1, upgrade to the recommended package version 3.2.0-55.85 or later.
USN-1992-1 affects Ubuntu 12.04 specifically with the Linux kernel versions prior to 3.2.0-55.85.
No, USN-1992-1 can only be exploited by local users with access to the system.
USN-1992-1 could potentially leak sensitive information from kernel memory which may include user data.