LWN.net Logo

kernel: multiple vulnerabilities

Package(s):linux CVE #(s):CVE-2013-3227 CVE-2013-3301
Created:May 16, 2013 Updated:July 18, 2013
Description:

From the Debian advisory:

CVE-2013-3227: Mathias Krauss discovered an issue in the Communication CPU to Application CPU Interface (CAIF). Local users can gain access to sensitive kernel memory.

CVE-2013-3301: Namhyung Kim reported an issue in the tracing subsystem. A privileged local user could cause a denial of service (system crash). This vulnerabililty is not applicable to Debian systems by default.

Alerts:
Debian DSA-2669-1 2013-05-15
Mageia MGASA-2013-0147 2013-05-17
Mageia MGASA-2013-0148 2013-05-17
Mageia MGASA-2013-0149 2013-05-17
Mageia MGASA-2013-0150 2013-05-17
Mageia MGASA-2013-01451 2013-05-17
Ubuntu USN-1837-1 2013-05-24
Ubuntu USN-1835-1 2013-05-24
Ubuntu USN-1833-1 2013-05-24
Ubuntu USN-1834-1 2013-05-24
Ubuntu USN-1836-1 2013-05-24
Ubuntu USN-1839-1 2013-05-28
Ubuntu USN-1878-1 2013-06-14
Ubuntu USN-1879-1 2013-06-14
Ubuntu USN-1880-1 2013-06-14
Ubuntu USN-1881-1 2013-06-14
Ubuntu USN-1882-1 2013-06-14
SUSE SUSE-SU-2013:1022-1 2013-06-17
SUSE SUSE-SU-2013:1022-2 2013-06-17
SUSE SUSE-SU-2013:1022-3 2013-06-18
Mandriva MDVSA-2013:176 2013-06-24
SUSE SUSE-SU-2013:1182-2 2013-07-12
Mandriva MDVSA-2013:194 2013-07-11
Red Hat RHSA-2013:1051-01 2013-07-16
Red Hat RHSA-2013:1080-01 2013-07-16
CentOS CESA-2013:1051 2013-07-17
Oracle ELSA-2013-1051 2013-07-16
Scientific Linux SL-kern-20130717 2013-07-17
Oracle ELSA-2013-2538 2013-07-18
Oracle ELSA-2013-2538 2013-07-18
Red Hat RHSA-2013:1264-01 2013-09-16
SUSE SUSE-SU-2013:1473-1 2013-09-21

(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds