Summary
Ubuntu Update for Linux kernel vulnerabilities USN-1361-1
Solution
Please Install the Updated Packages.
Insight
Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service.
(CVE-2011-3353)
A flaw was found in KVM's Programmable Interval Timer (PIT). When a virtual interrupt control is not available a local user could use this to cause a denial of service by starting a timer. (CVE-2011-4622)
A flaw was discovered in the XFS filesystem. If a local user mounts a specially crafted XFS image it could potential execute arbitrary code on the system. (CVE-2012-0038)
Chen Haogang discovered an integer overflow that could result in memory corruption. A local unprivileged user could use this to crash the system.
(CVE-2012-0044)
Affected
linux on Ubuntu 10.10
Severity
Classification
-
CVE CVE-2011-3353, CVE-2011-4622, CVE-2012-0038, CVE-2012-0044 -
CVSS Base Score: 7.2
AV:L/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities