First published: Tue Oct 22 2013(Updated: )
Dan Carpenter discovered an information leak in the HP Smart Array and Compaq SMART2 disk-array driver in the Linux kernel. A local user could exploit this flaw to obtain sensitive information from kernel memory.
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-3.5.0-42-powerpc64-smp | <3.5.0-42.65 | 3.5.0-42.65 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.10 | |
All of | ||
ubuntu/linux-image-3.5.0-42-highbank | <3.5.0-42.65 | 3.5.0-42.65 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.10 | |
All of | ||
ubuntu/linux-image-3.5.0-42-omap | <3.5.0-42.65 | 3.5.0-42.65 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.10 | |
All of | ||
ubuntu/linux-image-3.5.0-42-powerpc-smp | <3.5.0-42.65 | 3.5.0-42.65 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.10 | |
All of | ||
ubuntu/linux-image-3.5.0-42-generic | <3.5.0-42.65 | 3.5.0-42.65 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of USN-1996-1 is considered to be moderate due to the potential for information leakage from kernel memory.
To fix USN-1996-1, upgrade to the patched version 3.5.0-42.65 of the affected packages for Ubuntu 12.10.
The vulnerability in USN-1996-1 is caused by an information leak in the HP Smart Array and Compaq SMART2 disk-array driver within the Linux kernel.
The vulnerability USN-1996-1 was discovered by Dan Carpenter.
USN-1996-1 affects Ubuntu 12.10 with specific kernel package versions prior to 3.5.0-42.65.