Summary
Ubuntu Update for Linux kernel vulnerabilities USN-1364-1
Solution
Please Install the Updated Packages.
Insight
A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. (CVE-2012-0038)
Andy Whitcroft discovered a that the Overlayfs filesystem was not doing the extended permission checks needed by cgroups and Linux Security Modules (LSMs). A local user could exploit this to by-pass security policy and access files that should not be accessible. (CVE-2012-0055)
JÃ
¼
ri Aedla discovered that the kernel incorrectly handled /proc/< pid>
/mem
permissions. A local attacker could exploit this and gain root privileges.
(CVE-2012-0056)
A flaw was found in the linux kernels IPv4 IGMP query processing. A remote attacker could exploit this to cause a denial of service. (CVE-2012-0207)
Affected
linux-ti-omap4 on Ubuntu 11.10
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2012-0038, CVE-2012-0055, CVE-2012-0056, CVE-2012-0207 -
CVSS Base Score: 7.8
AV:N/AC:L/Au:N/C:N/I:N/A:C
Related Vulnerabilities