| |||||||||||||||||||
Ubuntu alert USN-1474-1 (linux-ti-omap4)
========================================================================== Ubuntu Security Notice USN-1474-1 June 13, 2012 linux-ti-omap4 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 12.04 LTS Summary: Several security issues were fixed in the kernel. Software Description: - linux-ti-omap4: Linux kernel for OMAP4 Details: A flaw was discovered in the Linux kernel's KVM (kernel virtual machine). An administrative user in the guest OS could leverage this flaw to cause a denial of service in the host OS. (CVE-2012-2121) Schacher Raindel discovered a flaw in the Linux kernel's memory handling when hugetlb is enabled. An unprivileged local attacker could exploit this flaw to cause a denial of service and potentially gain higher privileges. (CVE-2012-2133) Stephan Mueller reported a flaw in the Linux kernel's dl2k network driver's handling of ioctls. An unprivileged local user could leverage this flaw to cause a denial of service. (CVE-2012-2313) Timo Warns reported multiple flaws in the Linux kernel's hfsplus filesystem. An unprivileged local user could exploit these flaws to gain root system priviliges. (CVE-2012-2319) Xi Wang discovered a flaw in the Linux kernel's i915 graphics driver handling of cliprect on 32 bit systems. An unprivileged local attacker could leverage this flaw to cause a denial of service or potentially gain root privileges. (CVE-2012-2383) Xi Wang discovered a flaw in the Linux kernel's i915 graphics driver handling of buffer_count on 32 bit systems. An unprivileged local attacker could leverage this flaw to cause a denial of service or potentially gain root privileges. (CVE-2012-2384) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 12.04 LTS: linux-image-3.2.0-1414-omap4 3.2.0-1414.19 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. If you use linux-restricted-modules, you have to update that package as well to get modules which work with the new kernel version. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-server, linux-powerpc), a standard system upgrade will automatically perform this as well. References: http://www.ubuntu.com/usn/usn-1474-1 CVE-2012-2121, CVE-2012-2133, CVE-2012-2313, CVE-2012-2319, CVE-2012-2383, CVE-2012-2384 Package Information: https://launchpad.net/ubuntu/+source/linux-ti-omap4/3.2.0... -- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security... (Log in to post comments)
Ubuntu security update to linux-ti-omap4 Posted Jun 14, 2012 19:13 UTC (Thu) by a0919505@ti.com (subscriber, #74469) [Link]
(Disclaimer: I work for TI.)
Hi,
OMAP4 does not support KVM, so I think it is safe to say OMAP4 is not concerned by CVE-2012-2121.
I think ARM arch. has no support for hugetlb in the Ubuntu kernel, so I think OMAP4 is not concerned by CVE-2012-2133 either.
OMAP4 has no dl2k network interface, so I think CVE-2012-2313 does not apply. No i915 either, so CVE-2012-2383 and CVE-2012-2384 are not applicable to OMAP4.
In fact, I think the only security issue, which applies to OMAP4 is CVE-2012-2319 (hfsplus fs). Using hfsplus on OMAP4 is probably possible, but also probably not a very common case.
Best regards,
V.
|
|||||||||||||||||||