First published: Tue Oct 22 2013(Updated: )
Dan Carpenter discovered an information leak in the HP Smart Array and Compaq SMART2 disk-array driver in the Linux kernel. A local user could exploit this flaw to obtain sensitive information from kernel memory.
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-3.5.0-234-omap4 | <3.5.0-234.50 | 3.5.0-234.50 |
Ubuntu gir1.2-packagekitglib-1.0 | =12.10 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
USN-1997-1 is categorized as a high severity vulnerability due to its potential for information leakage.
To remediate USN-1997-1, you should update to the fixed linux-image-3.5.0-234-omap4 version or a later release.
USN-1997-1 affects Ubuntu 12.10 systems utilizing the HP Smart Array and Compaq SMART2 disk-array driver.
No, USN-1997-1 is not a remote vulnerability; it requires local access to exploit the information leak.
If you cannot update your system, consider restricting local user access to mitigate the risk associated with USN-1997-1.