First published: Fri Nov 08 2013(Updated: )
Dan Carpenter discovered an information leak in the HP Smart Array and Compaq SMART2 disk-array driver in the Linux kernel. A local user could exploit this flaw to obtain sensitive information from kernel memory. (CVE-2013-2147) Kees Cook discovered flaw in the Human Interface Device (HID) subsystem when CONFIG_HID_ZEROPLUS is enabled. A physically proximate attacker could leverage this flaw to cause a denial of service via a specially crafted device. (CVE-2013-2889) Kees Cook discovered another flaw in the Human Interface Device (HID) subsystem of the Linux kernel when any of CONFIG_LOGITECH_FF, CONFIG_LOGIG940_FF, or CONFIG_LOGIWHEELS_FF are enabled. A physcially proximate attacker can leverage this flaw to cause a denial of service vias a specially crafted device. (CVE-2013-2893) Kees Cook discovered yet another flaw in the Human Interface Device (HID) subsystem of the Linux kernel when CONFIG_HID_MULTITOUCH is enabled. A physically proximate attacker could leverage this flaw to cause a denial of service (OOPS) via a specially crafted device. (CVE-2013-2897) A flaw was discovered in the Linux kernel's dm snapshot facility. A remote authenticated user could exploit this flaw to obtain sensitive information or modify/corrupt data. (CVE-2013-4299)
Affected Software | Affected Version | How to fix |
---|---|---|
All of | ||
ubuntu/linux-image-2.6.32-53-lpia | <2.6.32-53.115 | 2.6.32-53.115 |
Ubuntu 22.04 LTS | =10.04 | |
All of | ||
ubuntu/linux-image-2.6.32-53-generic-pae | <2.6.32-53.115 | 2.6.32-53.115 |
Ubuntu 22.04 LTS | =10.04 | |
All of | ||
ubuntu/linux-image-2.6.32-53-sparc64 | <2.6.32-53.115 | 2.6.32-53.115 |
Ubuntu 22.04 LTS | =10.04 | |
All of | ||
ubuntu/linux-image-2.6.32-53-ia64 | <2.6.32-53.115 | 2.6.32-53.115 |
Ubuntu 22.04 LTS | =10.04 | |
All of | ||
ubuntu/linux-image-2.6.32-53-386 | <2.6.32-53.115 | 2.6.32-53.115 |
Ubuntu 22.04 LTS | =10.04 | |
All of | ||
ubuntu/linux-image-2.6.32-53-powerpc | <2.6.32-53.115 | 2.6.32-53.115 |
Ubuntu 22.04 LTS | =10.04 | |
All of | ||
ubuntu/linux-image-2.6.32-53-versatile | <2.6.32-53.115 | 2.6.32-53.115 |
Ubuntu 22.04 LTS | =10.04 | |
All of | ||
ubuntu/linux-image-2.6.32-53-generic | <2.6.32-53.115 | 2.6.32-53.115 |
Ubuntu 22.04 LTS | =10.04 | |
All of | ||
ubuntu/linux-image-2.6.32-53-powerpc64-smp | <2.6.32-53.115 | 2.6.32-53.115 |
Ubuntu 22.04 LTS | =10.04 | |
All of | ||
ubuntu/linux-image-2.6.32-53-preempt | <2.6.32-53.115 | 2.6.32-53.115 |
Ubuntu 22.04 LTS | =10.04 | |
All of | ||
ubuntu/linux-image-2.6.32-53-powerpc-smp | <2.6.32-53.115 | 2.6.32-53.115 |
Ubuntu 22.04 LTS | =10.04 | |
All of | ||
ubuntu/linux-image-2.6.32-53-server | <2.6.32-53.115 | 2.6.32-53.115 |
Ubuntu 22.04 LTS | =10.04 | |
All of | ||
ubuntu/linux-image-2.6.32-53-sparc64-smp | <2.6.32-53.115 | 2.6.32-53.115 |
Ubuntu 22.04 LTS | =10.04 | |
All of | ||
ubuntu/linux-image-2.6.32-53-virtual | <2.6.32-53.115 | 2.6.32-53.115 |
Ubuntu 22.04 LTS | =10.04 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Contains the following vulnerabilities)
The severity of USN-2015-1 is considered to be high due to the potential for sensitive information exposure.
To fix USN-2015-1, update the affected packages to version 2.6.32-53.115 or higher.
Ubuntu 10.04 is the affected version for the vulnerability addressed in USN-2015-1.
The vulnerability in USN-2015-1 is caused by an information leak in the HP Smart Array and Compaq SMART2 disk-array driver.
Yes, a local user can exploit the vulnerability in USN-2015-1 to obtain sensitive information from kernel memory.