USN-2233-1: Linux kernel vulnerabilities
Pinkie Pie discovered a flaw in the Linux kernel's futex subsystem. An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or gain administrative privileges. (CVE-2014-3153) Dmitry Vyukov reported a flaw in the Linux kernel's handling of IPv6 UDP Fragmentation Offload (UFO) processing. A remote attacker could leverage this flaw to cause a denial of service (system crash). (CVE-2013-4387) Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP Fragmentation Offload (UFO). An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or possibly gain administrative privileges. (CVE-2013-4470) A flaw was discovered in the Linux kernel's IPC reference counting. An unprivileged local user could exploit this flaw to cause a denial of service (OOM system crash). (CVE-2013-4483) halfdog reported an error in the AMD K7 and K8 platform support in the Linux kernel. An unprivileged local user could exploit this flaw on AMD based systems to cause a denial of service (task kill) or possibly gain privileges via a crafted application. (CVE-2014-1438) Sasha Levin reported a bug in the Linux kernel's virtual memory management subsystem. An unprivileged local user could exploit this flaw to cause a denial of service (system crash). (CVE-2014-3122)
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-2233-1?
The severity of USN-2233-1 is considered high due to the potential for an unprivileged local user to cause a denial of service or escalate privileges.
How do I fix USN-2233-1?
To fix USN-2233-1, update your Linux kernel to version 2.6.32-61.124 or later.
Who reported the vulnerability associated with USN-2233-1?
The vulnerability in USN-2233-1 was reported by Dmitry Vyukov.
What products are affected by USN-2233-1?
USN-2233-1 affects various packages of Ubuntu 10.04, including linux-image-2.6.32-61-generic and linux-image-2.6.32-61-preempt.
What type of vulnerability is described in USN-2233-1?
USN-2233-1 describes a flaw in the Linux kernel's futex subsystem that can lead to a denial of service or privilege escalation.