1. Ubuntu Security Notices
  2. USN-1362-1

USN-1362-1: Linux kernel vulnerabilities

Publication date

13 February 2012

Overview

Several security issues were fixed in the kernel.

Releases

Packages

Details

Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user
who can mount a FUSE file system could cause a denial of service.
(CVE-2011-3353)

A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual
interrupt control is not available a local user could use this to cause a
denial of service by starting a timer. (CVE-2011-4622)

A flaw was discovered in the XFS filesystem. If a local user mounts a
specially crafted XFS image it could potential execute arbitrary code on
the system. (CVE-2012-0038)

Chen Haogang discovered an integer overflow that could result in memory
corruption. A local unprivileged user could use this to crash the system.
(CVE-2012-0044)

Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user
who can mount a FUSE file system could cause a denial of service.
(CVE-2011-3353)

A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual
interrupt control is not available a local user could use this to cause a
denial of service by starting a timer. (CVE-2011-4622)

A flaw was discovered in the XFS filesystem. If a local user mounts a
specially crafted XFS image it could potential execute arbitrary code on
the system. (CVE-2012-0038)

Chen Haogang discovered an integer overflow that could result in memory
corruption. A local unprivileged user could use this to crash the system.
(CVE-2012-0044)

Update instructions

After a standard system update you need to reboot your computer to make all the necessary changes.

Learn more about how to get the fixes.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
11.04 natty linux-image-2.6.38-13-powerpc –  2.6.38-13.55
linux-image-2.6.38-13-powerpc64-smp –  2.6.38-13.55
linux-image-2.6.38-13-generic-pae –  2.6.38-13.55
linux-image-2.6.38-13-versatile –  2.6.38-13.55
linux-image-2.6.38-13-generic –  2.6.38-13.55
linux-image-2.6.38-13-virtual –  2.6.38-13.55
linux-image-2.6.38-13-server –  2.6.38-13.55
linux-image-2.6.38-13-omap –  2.6.38-13.55
linux-image-2.6.38-13-powerpc-smp –  2.6.38-13.55

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Have additional questions?

Talk to a member of the team ›