CVE-2011-1162 in Ubuntu

CVE-2011-1162

Priority

Low

Description

The tpm_read function in the Linux kernel 2.6 does not properly clear
memory, which might allow local users to read the results of the previous
TPM command.

Ubuntu-Description

Peter Huewe discovered an information leak in the handling of reading
security-related TPM data. A local, unprivileged user could read the
results of a previous TPM command.

References

Bugs

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-1162
https://launchpad.net/bugs/899463

Package

Source: linux-armadaxp (LP Ubuntu Debian)

Upstream:	released (3.1~rc8)
Ubuntu 10.04 LTS (Lucid Lynx):	DNE
Ubuntu 12.04 LTS (Precise Pangolin):	not-affected (3.2.0-1600.1)
Ubuntu 12.10 (Quantal Quetzal):	not-affected (3.2.0-1602.5)
Ubuntu 13.04 (Raring Ringtail):	DNE
Ubuntu 13.10 (Saucy Salamander):	DNE

Package

Source: linux-ec2 (LP Ubuntu Debian)

Upstream:	released (3.1~rc8)
Ubuntu 10.04 LTS (Lucid Lynx):	released (2.6.32-341.41)
Ubuntu 12.04 LTS (Precise Pangolin):	DNE
Ubuntu 12.10 (Quantal Quetzal):	DNE
Ubuntu 13.04 (Raring Ringtail):	DNE
Ubuntu 13.10 (Saucy Salamander):	DNE

Package

Source: linux-lts-backport-oneiric (LP Ubuntu Debian)

Upstream:	released (3.1~rc8)
Ubuntu 10.04 LTS (Lucid Lynx):	released (3.0.0-13.21~lucid1)
Ubuntu 12.04 LTS (Precise Pangolin):	DNE
Ubuntu 12.10 (Quantal Quetzal):	DNE
Ubuntu 13.04 (Raring Ringtail):	DNE
Ubuntu 13.10 (Saucy Salamander):	DNE

Package

Source: linux-lts-backport-natty (LP Ubuntu Debian)

Upstream:	released (3.1~rc8)
Ubuntu 10.04 LTS (Lucid Lynx):	released (2.6.38-13.54~lucid1)
Ubuntu 12.04 LTS (Precise Pangolin):	DNE
Ubuntu 12.10 (Quantal Quetzal):	DNE
Ubuntu 13.04 (Raring Ringtail):	DNE
Ubuntu 13.10 (Saucy Salamander):	DNE

Package

Source: linux-lts-quantal (LP Ubuntu Debian)

Upstream:	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	DNE
Ubuntu 12.04 LTS (Precise Pangolin):	not-affected
Ubuntu 12.10 (Quantal Quetzal):	DNE
Ubuntu 13.04 (Raring Ringtail):	DNE
Ubuntu 13.10 (Saucy Salamander):	DNE

Patches:

Package

Source: linux-mvl-dove (LP Ubuntu Debian)

Upstream:	released (3.1~rc8)
Ubuntu 10.04 LTS (Lucid Lynx):	pending (2.6.32-221.39)
Ubuntu 12.04 LTS (Precise Pangolin):	DNE
Ubuntu 12.10 (Quantal Quetzal):	DNE
Ubuntu 13.04 (Raring Ringtail):	DNE
Ubuntu 13.10 (Saucy Salamander):	DNE

Package

Source: linux-lts-backport-maverick (LP Ubuntu Debian)

Upstream:	released (3.1~rc8)
Ubuntu 10.04 LTS (Lucid Lynx):	released (2.6.35-32.64~lucid1)
Ubuntu 12.04 LTS (Precise Pangolin):	DNE
Ubuntu 12.10 (Quantal Quetzal):	DNE
Ubuntu 13.04 (Raring Ringtail):	DNE
Ubuntu 13.10 (Saucy Salamander):	DNE

Package

Source: linux (LP Ubuntu Debian)

Upstream:	released (3.1~rc8)
Ubuntu 10.04 LTS (Lucid Lynx):	released (2.6.32-37.80)
Ubuntu 12.04 LTS (Precise Pangolin):	not-affected (3.1.0-1.1)
Ubuntu 12.10 (Quantal Quetzal):	not-affected (3.1.0-1.1)
Ubuntu 13.04 (Raring Ringtail):	not-affected (3.1.0-1.1)
Ubuntu 13.10 (Saucy Salamander):	not-affected (3.1.0-1.1)

Patches:

Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2

Fixed by 3321c07ae5068568cd61ac9f4ba749006a7185c9

Package

Source: linux-ti-omap4 (LP Ubuntu Debian)

Upstream:	released (3.1~rc8)
Ubuntu 10.04 LTS (Lucid Lynx):	DNE
Ubuntu 12.04 LTS (Precise Pangolin):	not-affected (3.0.0-1400.1)
Ubuntu 12.10 (Quantal Quetzal):	not-affected (3.0.0-1400.1)
Ubuntu 13.04 (Raring Ringtail):	not-affected (3.0.0-1400.1)
Ubuntu 13.10 (Saucy Salamander):	not-affected (3.0.0-1400.1)

Package

Source: linux-fsl-imx51 (LP Ubuntu Debian)

Upstream:	released (3.1~rc8)
Ubuntu 10.04 LTS (Lucid Lynx):	released (2.6.31-612.32)
Ubuntu 12.04 LTS (Precise Pangolin):	DNE
Ubuntu 12.10 (Quantal Quetzal):	DNE
Ubuntu 13.04 (Raring Ringtail):	DNE
Ubuntu 13.10 (Saucy Salamander):	DNE

Package

Source: linux-lts-raring (LP Ubuntu Debian)

Upstream:	released (3.1~rc8)
Ubuntu 10.04 LTS (Lucid Lynx):	DNE
Ubuntu 12.04 LTS (Precise Pangolin):	not-affected
Ubuntu 12.10 (Quantal Quetzal):	DNE
Ubuntu 13.04 (Raring Ringtail):	DNE
Ubuntu 13.10 (Saucy Salamander):	DNE

More Information

Updated: 2013-05-10 19:14:31 UTC (commit 6828)