Ubuntu USN-2116-1: Linux Kernel OMAP4 Multiple Vulnerabilities Fix

Critical Vulnerability Information Vulnerability ID USN-2116-1 Disclosure Date February 18, 2014 Vulnerability Overview Multiple security issues in the Linux kernel (OMAP4) have been fixed. Detailed Description CVE-2013-2929: Vasily Kulikov reported a flaw in the ptrace implementation of the Linux kernel. An unauthorized local user could exploit this flaw to access sensitive information in kernel memory. CVE-2013-4592: A memory region handling flaw was discovered in the Kernel-based Virtual Machine (KVM) subsystem. A local user with device assignment privileges could exploit this flaw to cause a denial of service (memory exhaustion). CVE-2013-6378: Nico Golde and Fabian Yamaguchi reported a flaw in the debugfs filesystem of the Linux kernel. A local user with administrative privileges could exploit this vulnerability to cause a denial of service (OOPS). CVE-2013-6380: Nico Golde and Fabian Yamaguchi reported a flaw in the Adaptec AACRAID SCSI RAID device driver in the Linux kernel. A local user could exploit this vulnerability to cause a denial of service. References CVE-2013-6380 CVE-2013-6378 CVE-2013-4592 CVE-2013-2929 Related Notices USN-2136-1 USN-2129-1 USN-2128-1 USN-2115-1 USN-2114-1 Update Notes A system reboot is required after standard system updates to apply all changes. Due to unavoidable ABI changes, the kernel update has been assigned a new version number, requiring recompilation and reinstallation of all third-party kernel modules. If using linux-restricted-modules, this package must be updated to function properly with the new kernel version. Mitigation Update the system to the following package versions: - Ubuntu 13.10 (saucy): linux-image-3.5.0-238-omap4 3.5.0-238.54

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu USN-2116-1: Linux Kernel OMAP4 Multiple Vulnerabilities Fix