Summary
Ubuntu Update for Linux kernel vulnerabilities USN-1594-1
Solution
Please Install the Updated Packages.
Insight
Vadim Ponomarev discovered a flaw in the Linux kernel causing a reference leak when PID namespaces are used. A remote attacker could exploit this flaw causing a denial of service. (CVE-2012-2127)
A flaw was found in how the Linux kernel's KVM (Kernel-based Virtual Machine) subsystem handled MSI (Message Signaled Interrupts). A local unprivileged user could exploit this flaw to cause a denial of service or potentially elevate privileges. (CVE-2012-2137)
Affected
linux-lts-backport-oneiric on Ubuntu 10.04 LTS
Severity
Classification
-
CVE CVE-2012-2127, CVE-2012-2137 -
CVSS Base Score: 6.9
AV:L/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities