CVE-2012-0957
Priority
Low
Description
The override_release function in kernel/sys.c in the Linux kernel before
3.4.16 allows local users to obtain sensitive information from kernel stack
memory via a uname system call in conjunction with a UNAME26 personality.
3.4.16 allows local users to obtain sensitive information from kernel stack
memory via a uname system call in conjunction with a UNAME26 personality.
Ubuntu-Description
Brad Spengler discovered a flaw in the Linux kernel's uname system call. An
unprivileged user could exploit this flaw to read kernel stack memory.
unprivileged user could exploit this flaw to read kernel stack memory.
References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0957
https://lkml.org/lkml/2012/10/9/550
http://www.ubuntu.com/usn/usn-1644-1
http://www.ubuntu.com/usn/usn-1645-1
http://www.ubuntu.com/usn/usn-1646-1
http://www.ubuntu.com/usn/usn-1647-1
http://www.ubuntu.com/usn/usn-1648-1
http://www.ubuntu.com/usn/usn-1649-1
http://www.ubuntu.com/usn/usn-1652-1
http://www.ubuntu.com/usn/usn-1704-1
https://lkml.org/lkml/2012/10/9/550
http://www.ubuntu.com/usn/usn-1644-1
http://www.ubuntu.com/usn/usn-1645-1
http://www.ubuntu.com/usn/usn-1646-1
http://www.ubuntu.com/usn/usn-1647-1
http://www.ubuntu.com/usn/usn-1648-1
http://www.ubuntu.com/usn/usn-1649-1
http://www.ubuntu.com/usn/usn-1652-1
http://www.ubuntu.com/usn/usn-1704-1
Notes
jj: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1060521
Package
| Upstream: | released (3.7~rc2) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.2.0-1611.16) |
| Ubuntu 12.10 (Quantal Quetzal): | released (3.5.0-1605.7) |
| Ubuntu 13.04 (Raring Ringtail): | not-affected |
Package
| Upstream: | released (3.7~rc2) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | not-affected |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
Package
| Upstream: | released (3.7~rc2) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (3.0.0-28.45~lucid1) |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
Package
| Upstream: | released (3.7~rc2) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | ignored (abandoned) |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | ignored (abandoned) |
Package
| Upstream: | released (3.7~rc2) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | ignored (abandoned) |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | ignored (abandoned) |
Package
| Upstream: | released (3.7~rc2) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (abandoned) |
| Ubuntu 11.10 (Oneiric Ocelot): | ignored (abandoned) |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | ignored (abandoned) |
Package
| Upstream: | released (3.7~rc2) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | not-affected |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
Package
| Upstream: | DNE |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.5.0-19.30~precise1) |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
Patches:
Package
| Upstream: | released (3.7~rc2) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (reached end-of-life) |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
Package
| Upstream: | released (3.7~rc2) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (reached end-of-life) |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
Package
| Upstream: | released (3.7~rc2) |
| Ubuntu 8.04 LTS (Hardy Heron): | not-affected |
| Ubuntu 10.04 LTS (Lucid Lynx): | not-affected |
| Ubuntu 11.10 (Oneiric Ocelot): | released (3.0.0-28.45) |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.2.0-34.53) |
| Ubuntu 12.10 (Quantal Quetzal): | released (3.5.0-19.30) |
| Ubuntu 13.04 (Raring Ringtail): | not-affected |
Patches:
Package
| Upstream: | released (3.7~rc2) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | released (3.0.0-1218.31) |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.2.0-1422.29) |
| Ubuntu 12.10 (Quantal Quetzal): | released (3.5.0-19.30) |
| Ubuntu 13.04 (Raring Ringtail): | not-affected |
Package
| Upstream: | released (3.7~rc2) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | ignored (abandoned) |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | ignored (abandoned) |
Package
| Upstream: | released (3.7~rc2) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (reached end-of-life, does not affect buildd) |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |