USN-2490-1: Linux kernel vulnerabilities
Andy Lutomirski discovered an information leak in the Linux kernel's Thread Local Storage (TLS) implementation allowing users to bypass the espfix to obtain information that could be used to bypass the Address Space Layout Randomization (ASLR) protection mechanism. A local user could exploit this flaw to obtain potentially sensitive information from kernel memory. (CVE-2014-8133) Prasad J Pandit reported a flaw in the rockcontinue function of the Linux kernel's ISO 9660 CDROM file system. A local user could exploit this flaw to cause a denial of service (system crash or hang). (CVE-2014-9420)
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-2490-1?
USN-2490-1 has been classified with high severity due to its potential to allow a local user to bypass security protections.
How do I fix USN-2490-1?
To fix USN-2490-1, upgrade your system to the linux-image versions 2.6.32-72.139 or later.
Which systems are affected by USN-2490-1?
USN-2490-1 affects Ubuntu 10.04 systems running specific versions of the Linux kernel up to 2.6.32-72.139.
What kind of vulnerability is described in USN-2490-1?
USN-2490-1 describes an information leak in the Linux kernel's Thread Local Storage (TLS) implementation.
Can USN-2490-1 impact my system's security?
Yes, USN-2490-1 can significantly impact your system's security by potentially allowing attackers to bypass Address Space Layout Randomization (ASLR).