USN-988-1: Linux kernel vulnerabilities
Ben Hawkes discovered that the Linux kernel did not correctly validate memory ranges on 64bit kernels when allocating memory on behalf of 32bit system calls. On a 64bit system, a local attacker could perform malicious multicast getsockopt calls to gain root privileges. (CVE-2010-3081) Ben Hawkes discovered that the Linux kernel did not correctly filter registers on 64bit kernels when performing 32bit system calls. On a 64bit system, a local attacker could manipulate 32bit system calls to gain root privileges. (Ubuntu 6.06 LTS and 8.04 LTS were not affected.) (CVE-2010-3301)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-serverto a version that resolves this vulnerability.Fixed in 2.6.31-22.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-ia64to a version that resolves this vulnerability.Fixed in 2.6.31-22.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-generic-paeto a version that resolves this vulnerability.Fixed in 2.6.31-22.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-386to a version that resolves this vulnerability.Fixed in 2.6.31-22.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-powerpcto a version that resolves this vulnerability.Fixed in 2.6.31-22.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-sparc64to a version that resolves this vulnerability.Fixed in 2.6.31-22.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-sparc64-smpto a version that resolves this vulnerability.Fixed in 2.6.31-22.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-powerpc-smpto a version that resolves this vulnerability.Fixed in 2.6.31-22.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-virtualto a version that resolves this vulnerability.Fixed in 2.6.31-22.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-powerpc64-smpto a version that resolves this vulnerability.Fixed in 2.6.31-22.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-genericto a version that resolves this vulnerability.Fixed in 2.6.31-22.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.31-22-lpiato a version that resolves this vulnerability.Fixed in 2.6.31-22.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.28-19-lpiato a version that resolves this vulnerability.Fixed in 2.6.28-19.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.28-19-versatileto a version that resolves this vulnerability.Fixed in 2.6.28-19.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.28-19-imx51to a version that resolves this vulnerability.Fixed in 2.6.28-19.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.28-19-genericto a version that resolves this vulnerability.Fixed in 2.6.28-19.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.28-19-serverto a version that resolves this vulnerability.Fixed in 2.6.28-19.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.28-19-ixp4xxto a version that resolves this vulnerability.Fixed in 2.6.28-19.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.28-19-virtualto a version that resolves this vulnerability.Fixed in 2.6.28-19.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.28-19-iop32xto a version that resolves this vulnerability.Fixed in 2.6.28-19.65 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-powerpc64-smpto a version that resolves this vulnerability.Fixed in 2.6.24-28.79 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-hppa32to a version that resolves this vulnerability.Fixed in 2.6.24-28.79 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-genericto a version that resolves this vulnerability.Fixed in 2.6.24-28.79 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-powerpcto a version that resolves this vulnerability.Fixed in 2.6.24-28.79 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-sparc64-smpto a version that resolves this vulnerability.Fixed in 2.6.24-28.79 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-itaniumto a version that resolves this vulnerability.Fixed in 2.6.24-28.79 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-openvzto a version that resolves this vulnerability.Fixed in 2.6.24-28.79 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-virtualto a version that resolves this vulnerability.Fixed in 2.6.24-28.79 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-rtto a version that resolves this vulnerability.Fixed in 2.6.24-28.79 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-lpiato a version that resolves this vulnerability.Fixed in 2.6.24-28.79 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-hppa64to a version that resolves this vulnerability.Fixed in 2.6.24-28.79 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-mckinleyto a version that resolves this vulnerability.Fixed in 2.6.24-28.79 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-serverto a version that resolves this vulnerability.Fixed in 2.6.24-28.79 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-powerpc-smpto a version that resolves this vulnerability.Fixed in 2.6.24-28.79 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-386to a version that resolves this vulnerability.Fixed in 2.6.24-28.79 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-lpiacompatto a version that resolves this vulnerability.Fixed in 2.6.24-28.79 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-sparc64to a version that resolves this vulnerability.Fixed in 2.6.24-28.79 - Upgrade
Upgrade
ubuntu/linux-image-2.6.24-28-xento a version that resolves this vulnerability.Fixed in 2.6.24-28.79 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-hppa64to a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-mckinleyto a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-powerpc-smpto a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-hppa32-smpto a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-686to a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-amd64-k8to a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-amd64-serverto a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-386to a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-sparc64-smpto a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-k7to a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-sparc64to a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-serverto a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-powerpc64-smpto a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-hppa32to a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-mckinley-smpto a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-server-bigironto a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-itanium-smpto a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-amd64-xeonto a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-powerpcto a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-amd64-genericto a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-hppa64-smpto a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.15-55-itaniumto a version that resolves this vulnerability.Fixed in 2.6.15-55.88 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-powerpc-dbgsymto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-386to a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-powerpcto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-powerpc64-smpto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-preempt-dbgsymto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-sparc64-smp-dbgsymto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-powerpc64-smp-dbgsymto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-lpiato a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-generic-dbgsymto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-sparc64-dbgsymto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-ia64-dbgsymto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-generic-paeto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-lpia-dbgsymto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-genericto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-serverto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-preemptto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-powerpc-smp-dbgsymto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-386-dbgsymto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-versatileto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-virtualto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-powerpc-smpto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-generic-pae-dbgsymto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-server-dbgsymto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-ia64to a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-sparc64-smpto a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-sparc64to a version that resolves this vulnerability.Fixed in 2.6.32-24.43 - Upgrade
Upgrade
ubuntu/linux-image-2.6.32-24-versatile-dbgsymto a version that resolves this vulnerability.Fixed in 2.6.32-24.43
Event History
Frequently Asked Questions
What is the severity of USN-988-1?
The vulnerability identified by USN-988-1 has been rated as high severity due to the potential for local attackers to gain root privileges.
How do I fix USN-988-1?
To fix USN-988-1, update your system to the latest kernel version 2.6.31-22.65 or later.
Who is affected by USN-988-1?
USN-988-1 affects local users of Ubuntu 9.10 systems running vulnerable versions of the Linux kernel.
What type of vulnerability is identified in USN-988-1?
USN-988-1 is a privilege escalation vulnerability that allows local attackers to perform malicious multicast getsockopt calls.
Is there a workaround for USN-988-1?
There is no specific workaround for USN-988-1, so it is recommended to apply the proper updates.