17/9/2010

USN-988-1: Linux kernel vulnerabilities

First published: Fri Sep 17 2010(Updated: )

Ben Hawkes discovered that the Linux kernel did not correctly validate memory ranges on 64bit kernels when allocating memory on behalf of 32bit system calls. On a 64bit system, a local attacker could perform malicious multicast getsockopt calls to gain root privileges. (CVE-2010-3081) Ben Hawkes discovered that the Linux kernel did not correctly filter registers on 64bit kernels when performing 32bit system calls. On a 64bit system, a local attacker could manipulate 32bit system calls to gain root privileges. (Ubuntu 6.06 LTS and 8.04 LTS were not affected.) (CVE-2010-3301)

Affected Software	Affected Version	How to fix
All of
ubuntu/linux-image-2.6.31-22-server	<2.6.31-22.65	2.6.31-22.65
	=9.10
All of
ubuntu/linux-image-2.6.31-22-ia64	<2.6.31-22.65	2.6.31-22.65
	=9.10
All of
ubuntu/linux-image-2.6.31-22-generic-pae	<2.6.31-22.65	2.6.31-22.65
	=9.10
All of
ubuntu/linux-image-2.6.31-22-386	<2.6.31-22.65	2.6.31-22.65
	=9.10
All of
ubuntu/linux-image-2.6.31-22-powerpc	<2.6.31-22.65	2.6.31-22.65
	=9.10
All of
ubuntu/linux-image-2.6.31-22-sparc64	<2.6.31-22.65	2.6.31-22.65
	=9.10
All of
ubuntu/linux-image-2.6.31-22-sparc64-smp	<2.6.31-22.65	2.6.31-22.65
	=9.10
All of
ubuntu/linux-image-2.6.31-22-powerpc-smp	<2.6.31-22.65	2.6.31-22.65
	=9.10
All of
ubuntu/linux-image-2.6.31-22-virtual	<2.6.31-22.65	2.6.31-22.65
	=9.10
All of
ubuntu/linux-image-2.6.31-22-powerpc64-smp	<2.6.31-22.65	2.6.31-22.65
	=9.10
All of
ubuntu/linux-image-2.6.31-22-generic	<2.6.31-22.65	2.6.31-22.65
	=9.10
All of
ubuntu/linux-image-2.6.31-22-lpia	<2.6.31-22.65	2.6.31-22.65
	=9.10
All of
ubuntu/linux-image-2.6.28-19-lpia	<2.6.28-19.65	2.6.28-19.65
	=9.04
All of
ubuntu/linux-image-2.6.28-19-versatile	<2.6.28-19.65	2.6.28-19.65
	=9.04
All of
ubuntu/linux-image-2.6.28-19-imx51	<2.6.28-19.65	2.6.28-19.65
	=9.04
All of
ubuntu/linux-image-2.6.28-19-generic	<2.6.28-19.65	2.6.28-19.65
	=9.04
All of
ubuntu/linux-image-2.6.28-19-server	<2.6.28-19.65	2.6.28-19.65
	=9.04
All of
ubuntu/linux-image-2.6.28-19-ixp4xx	<2.6.28-19.65	2.6.28-19.65
	=9.04
All of
ubuntu/linux-image-2.6.28-19-virtual	<2.6.28-19.65	2.6.28-19.65
	=9.04
All of
ubuntu/linux-image-2.6.28-19-iop32x	<2.6.28-19.65	2.6.28-19.65
	=9.04
All of
ubuntu/linux-image-2.6.24-28-powerpc64-smp	<2.6.24-28.79	2.6.24-28.79
	=8.04
All of
ubuntu/linux-image-2.6.24-28-hppa32	<2.6.24-28.79	2.6.24-28.79
	=8.04
All of
ubuntu/linux-image-2.6.24-28-generic	<2.6.24-28.79	2.6.24-28.79
	=8.04
All of
ubuntu/linux-image-2.6.24-28-powerpc	<2.6.24-28.79	2.6.24-28.79
	=8.04
All of
ubuntu/linux-image-2.6.24-28-sparc64-smp	<2.6.24-28.79	2.6.24-28.79
	=8.04
All of
ubuntu/linux-image-2.6.24-28-itanium	<2.6.24-28.79	2.6.24-28.79
	=8.04
All of
ubuntu/linux-image-2.6.24-28-openvz	<2.6.24-28.79	2.6.24-28.79
	=8.04
All of
ubuntu/linux-image-2.6.24-28-virtual	<2.6.24-28.79	2.6.24-28.79
	=8.04
All of
ubuntu/linux-image-2.6.24-28-rt	<2.6.24-28.79	2.6.24-28.79
	=8.04
All of
ubuntu/linux-image-2.6.24-28-lpia	<2.6.24-28.79	2.6.24-28.79
	=8.04
All of
ubuntu/linux-image-2.6.24-28-hppa64	<2.6.24-28.79	2.6.24-28.79
	=8.04
All of
ubuntu/linux-image-2.6.24-28-mckinley	<2.6.24-28.79	2.6.24-28.79
	=8.04
All of
ubuntu/linux-image-2.6.24-28-server	<2.6.24-28.79	2.6.24-28.79
	=8.04
All of
ubuntu/linux-image-2.6.24-28-powerpc-smp	<2.6.24-28.79	2.6.24-28.79
	=8.04
All of
ubuntu/linux-image-2.6.24-28-386	<2.6.24-28.79	2.6.24-28.79
	=8.04
All of
ubuntu/linux-image-2.6.24-28-lpiacompat	<2.6.24-28.79	2.6.24-28.79
	=8.04
All of
ubuntu/linux-image-2.6.24-28-sparc64	<2.6.24-28.79	2.6.24-28.79
	=8.04
All of
ubuntu/linux-image-2.6.24-28-xen	<2.6.24-28.79	2.6.24-28.79
	=8.04
All of
ubuntu/linux-image-2.6.15-55-hppa64	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-mckinley	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-powerpc-smp	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-hppa32-smp	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-686	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-amd64-k8	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-amd64-server	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-386	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-sparc64-smp	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-k7	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-sparc64	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-server	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-powerpc64-smp	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-hppa32	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-mckinley-smp	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-server-bigiron	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-itanium-smp	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-amd64-xeon	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-powerpc	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-amd64-generic	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-hppa64-smp	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.15-55-itanium	<2.6.15-55.88	2.6.15-55.88
	=6.06
All of
ubuntu/linux-image-2.6.32-24-powerpc-dbgsym	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-386	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-powerpc	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-powerpc64-smp	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-preempt-dbgsym	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-sparc64-smp-dbgsym	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-powerpc64-smp-dbgsym	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-lpia	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-generic-dbgsym	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-sparc64-dbgsym	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-ia64-dbgsym	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-generic-pae	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-lpia-dbgsym	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-generic	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-server	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-preempt	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-powerpc-smp-dbgsym	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-386-dbgsym	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-versatile	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-virtual	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-powerpc-smp	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-generic-pae-dbgsym	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-server-dbgsym	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-ia64	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-sparc64-smp	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-sparc64	<2.6.32-24.43	2.6.32-24.43
	=10.04
All of
ubuntu/linux-image-2.6.32-24-versatile-dbgsym	<2.6.32-24.43	2.6.32-24.43
	=10.04

Never miss a vulnerability like this again

Reference Links

Child vulnerabilities

(Contains the following vulnerabilities)

agent/description
agent/event
agent/first-publish-date
agent/last-modified-date
agent/references
agent/severity
agent/softwarecombine
agent/tags
agent/title
agent/type
collector/usn
source/Ubuntu
anchor-related/USN-1074-1
anchor-related/USN-1119-1
anchor-related/USN-1074-2
anchor-related/USN-1083-1
anchor-related/USN-1041-1
agent/software-canonical-lookup
package-manager/ubuntu
vendor/ubuntu
canonical/ubuntu ubuntu
version/ubuntu ubuntu/9.10
version/ubuntu ubuntu/9.04
version/ubuntu ubuntu/8.04
version/ubuntu ubuntu/6.06
version/ubuntu ubuntu/10.04

USN-988-1: Linux kernel vulnerabilities

Never miss a vulnerability like this again

Reference Links

Child vulnerabilities

Company

Resources

Contact