Ubuntu USN-1575-1: Linux Kernel CVE-2012-3412/3430 Vulnerability Fix

Key Information Vulnerability Description: Title: USN-1575-1: Linux kernel (Oneiric backport) vulnerabilities Release Date: 19 September 2012 Summary: Several security issues have been fixed in the kernel. Detailed Information: CVE-2012-3412: Ben Hutchings reported a flaw in the Linux kernel affecting certain network drivers that support TSO (TCP segment offload). A local or peer user could exploit this flaw to cause a denial of service. CVE-2012-3430: Jay Fenlason and Doug Ledford discovered a flaw in the RDS socket implementation in the Linux kernel. A local, unprivileged user might exploit this flaw to read privileged information from the kernel. Update Instructions: A system reboot is required after updating to apply all necessary changes. Note: Due to unavoidable ABI changes, the kernel update has been assigned a new version number, requiring recompilation and reinstallation of all possibly installed third-party kernel modules. If using linux-restricted-modules, that package must also be upgraded to work with the new kernel version. Affected Package Versions: Ubuntu Version: 10.04 lucid Package Versions: - linux-image-3.0.0-26-server - 3.0.0-26.42~lucid1 - linux-image-3.0.0-26-generic - 3.0.0-26.42~lucid1 - linux-image-3.0.0-26-virtual - 3.0.0-26.42~lucid1 - linux-image-3.0.0-26-generic-pae - 3.0.0-26.42~lucid1 Related Notices: USN-1580-1 USN-1579-1 USN-1578-1 USN-1577-1 USN-1574-1 USN-1573-1 USN-1572-1 USN-1568-1 USN-1567-1

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu USN-1575-1: Linux Kernel CVE-2012-3412/3430 Vulnerability Fix