CVE-2012-2133
Priority
Medium
Description
Use-after-free vulnerability in the Linux kernel before 3.3.6, when huge
pages are enabled, allows local users to cause a denial of service (system
crash) or possibly gain privileges by interacting with a hugetlbfs
filesystem, as demonstrated by a umount operation that triggers improper
handling of quota data.
pages are enabled, allows local users to cause a denial of service (system
crash) or possibly gain privileges by interacting with a hugetlbfs
filesystem, as demonstrated by a umount operation that triggers improper
handling of quota data.
Ubuntu-Description
Schacher Raindel discovered a flaw in the Linux kernel's memory handling
when hugetlb is enabled. An unprivileged local attacker could exploit this
flaw to cause a denial of service and potentially gain higher privileges.
when hugetlb is enabled. An unprivileged local attacker could exploit this
flaw to cause a denial of service and potentially gain higher privileges.
References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2133
http://www.openwall.com/lists/oss-security/2012/04/24
http://www.ubuntu.com/usn/usn-1457-1
http://www.ubuntu.com/usn/usn-1468-1
http://www.ubuntu.com/usn/usn-1469-1
http://www.ubuntu.com/usn/usn-1470-1
http://www.ubuntu.com/usn/usn-1471-1
http://www.ubuntu.com/usn/usn-1472-1
http://www.ubuntu.com/usn/usn-1473-1
http://www.ubuntu.com/usn/usn-1474-1
http://www.ubuntu.com/usn/usn-1476-1
http://www.openwall.com/lists/oss-security/2012/04/24
http://www.ubuntu.com/usn/usn-1457-1
http://www.ubuntu.com/usn/usn-1468-1
http://www.ubuntu.com/usn/usn-1469-1
http://www.ubuntu.com/usn/usn-1470-1
http://www.ubuntu.com/usn/usn-1471-1
http://www.ubuntu.com/usn/usn-1472-1
http://www.ubuntu.com/usn/usn-1473-1
http://www.ubuntu.com/usn/usn-1474-1
http://www.ubuntu.com/usn/usn-1476-1
Bugs
Notes
jdstrand> linux-armadaxp is maintained by OEM
tyhicks> "The bug exists in kernel versions 2.6.24 and above."
jj> move none tracking bug to notes to stop the scripts from complaining
jj> https://bugs.launchpad.net/ubuntu/+source/linux/+bug/987107
tyhicks> "The bug exists in kernel versions 2.6.24 and above."
jj> move none tracking bug to notes to stop the scripts from complaining
jj> https://bugs.launchpad.net/ubuntu/+source/linux/+bug/987107
Package
| Upstream: | released (3.4~rc1) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.2.0-1604.7) |
| Ubuntu 12.10 (Quantal Quetzal): | not-affected (3.2.0-1604.7) |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.4~rc1) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.32-345.49) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.4~rc1) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (3.0.0-21.35~lucid1) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.4~rc1) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.4~rc1) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.4~rc1) |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (abandoned) |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.4~rc1) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.38-15.60~lucid1) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Patches:
Package
| Upstream: | released (3.4~rc1) |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (reached end-of-life) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.4~rc1) |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (reached end-of-life) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.4~rc1) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (2.6.32-41.90) |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.2.0-25.40) |
| Ubuntu 12.10 (Quantal Quetzal): | not-affected (3.4.0-1.1) |
| Ubuntu 13.04 (Raring Ringtail): | not-affected (3.4.0-1.1) |
| Ubuntu 13.10 (Saucy Salamander): | not-affected (3.4.0-1.1) |
Patches:
| Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | Fixed by 90481622d75715bfcb68501280a917dbfe516029 |
Package
| Upstream: | released (3.4~rc1) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.2.0-1414.19) |
| Ubuntu 12.10 (Quantal Quetzal): | not-affected (3.4.0-201.3) |
| Ubuntu 13.04 (Raring Ringtail): | not-affected (3.4.0-201.3) |
| Ubuntu 13.10 (Saucy Salamander): | not-affected (3.4.0-201.3) |
Package
| Upstream: | released (3.4~rc1) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.4~rc1) |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (reached end-of-life, does not affect buildd) |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |
Package
| Upstream: | released (3.4~rc1) |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | not-affected |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
| Ubuntu 13.10 (Saucy Salamander): | DNE |