USN-1996-1: Linux kernel vulnerability
Dan Carpenter discovered an information leak in the HP Smart Array and Compaq SMART2 disk-array driver in the Linux kernel. A local user could exploit this flaw to obtain sensitive information from kernel memory.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-3.5.0-42-powerpc64-smpto a version that resolves this vulnerability.Fixed in 3.5.0-42.65 - Upgrade
Upgrade
ubuntu/linux-image-3.5.0-42-highbankto a version that resolves this vulnerability.Fixed in 3.5.0-42.65 - Upgrade
Upgrade
ubuntu/linux-image-3.5.0-42-omapto a version that resolves this vulnerability.Fixed in 3.5.0-42.65 - Upgrade
Upgrade
ubuntu/linux-image-3.5.0-42-powerpc-smpto a version that resolves this vulnerability.Fixed in 3.5.0-42.65 - Upgrade
Upgrade
ubuntu/linux-image-3.5.0-42-genericto a version that resolves this vulnerability.Fixed in 3.5.0-42.65
Event History
Frequently Asked Questions
What is the severity of USN-1996-1?
The severity of USN-1996-1 is considered to be moderate due to the potential for information leakage from kernel memory.
How do I fix USN-1996-1?
To fix USN-1996-1, upgrade to the patched version 3.5.0-42.65 of the affected packages for Ubuntu 12.10.
What causes the vulnerability in USN-1996-1?
The vulnerability in USN-1996-1 is caused by an information leak in the HP Smart Array and Compaq SMART2 disk-array driver within the Linux kernel.
Who discovered the vulnerability USN-1996-1?
The vulnerability USN-1996-1 was discovered by Dan Carpenter.
What versions of Ubuntu are affected by USN-1996-1?
USN-1996-1 affects Ubuntu 12.10 with specific kernel package versions prior to 3.5.0-42.65.