CVE-2012-2390 in Ubuntu

CVE-2012-2390

Priority

Low

Description

Memory leak in mm/hugetlb.c in the Linux kernel before 3.4.2 allows local
users to cause a denial of service (memory consumption or system crash) via
invalid MAP_HUGETLB mmap operations.

Ubuntu-Description

An error was discovered in the Linux kernel's memory subsystem (hugetlb).
An unprivileged local user could exploit this flaw to cause a denial of
service (crash the system).

References

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2390
http://www.openwall.com/lists/oss-security/2012/05/23/14
http://www.spinics.net/lists/linux-mm/msg34763.html
http://www.ubuntu.com/usn/usn-1508-1
http://www.ubuntu.com/usn/usn-1515-1
http://www.ubuntu.com/usn/usn-1534-1
http://www.ubuntu.com/usn/usn-1535-1
http://www.ubuntu.com/usn/usn-1531-1
http://www.ubuntu.com/usn/usn-1538-1
http://www.ubuntu.com/usn/usn-1533-1
http://www.ubuntu.com/usn/usn-1539-1

Bugs

https://bugzilla.redhat.com/show_bug.cgi?id=824345
https://launchpad.net/bugs/1004621

Notes

jdstrand> linux-armadaxp is maintained by OEM
henrix> as per https://lkml.org/lkml/2012/5/22/418 Hardy is not affected
henrix> also, I couldn't reproduce this with test case http://marc.info/?l=linux-mm&m=133728900729735

Package

Source: linux-armadaxp (LP Ubuntu Debian)

Upstream:	released (3.5~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	DNE
Ubuntu 11.10 (Oneiric Ocelot):	DNE
Ubuntu 12.04 LTS (Precise Pangolin):	released (3.2.0-1605.8)
Ubuntu 12.10 (Quantal Quetzal):	not-affected (3.2.0-1605.8)
Ubuntu 13.04 (Raring Ringtail):	not-affected (3.2.0-1605.8)

Package

Source: linux-ec2 (LP Ubuntu Debian)

Upstream:	released (3.5~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	released (2.6.32-347.52)
Ubuntu 11.10 (Oneiric Ocelot):	DNE
Ubuntu 12.04 LTS (Precise Pangolin):	DNE
Ubuntu 12.10 (Quantal Quetzal):	DNE
Ubuntu 13.04 (Raring Ringtail):	DNE

Package

Source: linux-lts-backport-oneiric (LP Ubuntu Debian)

Upstream:	released (3.5~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	released (3.0.0-23.37~lucid1)
Ubuntu 11.10 (Oneiric Ocelot):	DNE
Ubuntu 12.04 LTS (Precise Pangolin):	DNE
Ubuntu 12.10 (Quantal Quetzal):	DNE
Ubuntu 13.04 (Raring Ringtail):	DNE

Package

Source: linux-linaro-shared (LP Ubuntu Debian)

Upstream:	released (3.5~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	DNE
Ubuntu 11.10 (Oneiric Ocelot):	ignored (abandoned)
Ubuntu 12.04 LTS (Precise Pangolin):	ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):	ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):	ignored (abandoned)

Package

Source: linux-linaro-vexpress (LP Ubuntu Debian)

Upstream:	released (3.5~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	DNE
Ubuntu 11.10 (Oneiric Ocelot):	ignored (abandoned)
Ubuntu 12.04 LTS (Precise Pangolin):	ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):	ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):	ignored (abandoned)

Package

Source: linux-qcm-msm (LP Ubuntu Debian)

Upstream:	released (3.5~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	ignored (abandoned)
Ubuntu 11.10 (Oneiric Ocelot):	ignored (abandoned)
Ubuntu 12.04 LTS (Precise Pangolin):	ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):	ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):	ignored (abandoned)

Package

Source: linux-lts-backport-natty (LP Ubuntu Debian)

Upstream:	released (3.5~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	released (2.6.38-15.65~lucid1)
Ubuntu 11.10 (Oneiric Ocelot):	DNE
Ubuntu 12.04 LTS (Precise Pangolin):	DNE
Ubuntu 12.10 (Quantal Quetzal):	DNE
Ubuntu 13.04 (Raring Ringtail):	DNE

Package

Source: linux-lts-quantal (LP Ubuntu Debian)

Upstream:	DNE
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	DNE
Ubuntu 11.10 (Oneiric Ocelot):	DNE
Ubuntu 12.04 LTS (Precise Pangolin):	not-affected
Ubuntu 12.10 (Quantal Quetzal):	DNE
Ubuntu 13.04 (Raring Ringtail):	DNE

Patches:

Package

Source: linux-mvl-dove (LP Ubuntu Debian)

Upstream:	released (3.5~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	ignored (reached end-of-life)
Ubuntu 11.10 (Oneiric Ocelot):	DNE
Ubuntu 12.04 LTS (Precise Pangolin):	DNE
Ubuntu 12.10 (Quantal Quetzal):	DNE
Ubuntu 13.04 (Raring Ringtail):	DNE

Package

Source: linux-lts-backport-maverick (LP Ubuntu Debian)

Upstream:	released (3.5~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	ignored (reached end-of-life)
Ubuntu 11.10 (Oneiric Ocelot):	DNE
Ubuntu 12.04 LTS (Precise Pangolin):	DNE
Ubuntu 12.10 (Quantal Quetzal):	DNE
Ubuntu 13.04 (Raring Ringtail):	DNE

Package

Source: linux (LP Ubuntu Debian)

Upstream:	released (3.5~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	not-affected
Ubuntu 10.04 LTS (Lucid Lynx):	released (2.6.32-42.95)
Ubuntu 11.10 (Oneiric Ocelot):	released (3.0.0-23.37)
Ubuntu 12.04 LTS (Precise Pangolin):	released (3.2.0-27.42)
Ubuntu 12.10 (Quantal Quetzal):	not-affected (3.5.0-1.1)
Ubuntu 13.04 (Raring Ringtail):	not-affected (3.5.0-1.1)

Patches:

Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2

Fixed by c50ac050811d6485616a193eb0f37bfbd191cc89

Package

Source: linux-ti-omap4 (LP Ubuntu Debian)

Upstream:	released (3.5~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	DNE
Ubuntu 11.10 (Oneiric Ocelot):	not-affected (HUGETLB not enabled on ARM)
Ubuntu 12.04 LTS (Precise Pangolin):	released (3.2.0-1416.21)
Ubuntu 12.10 (Quantal Quetzal):	not-affected (3.5.0-1.1)
Ubuntu 13.04 (Raring Ringtail):	not-affected (3.5.0-1.1)

Package

Source: linux-linaro-omap (LP Ubuntu Debian)

Upstream:	released (3.5~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	DNE
Ubuntu 11.10 (Oneiric Ocelot):	ignored (abandoned)
Ubuntu 12.04 LTS (Precise Pangolin):	ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):	ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):	ignored (abandoned)

Package

Source: linux-fsl-imx51 (LP Ubuntu Debian)

Upstream:	released (3.5~rc1)
Ubuntu 8.04 LTS (Hardy Heron):	DNE
Ubuntu 10.04 LTS (Lucid Lynx):	ignored (reached end-of-life, does not affect buildd)
Ubuntu 11.10 (Oneiric Ocelot):	DNE
Ubuntu 12.04 LTS (Precise Pangolin):	DNE
Ubuntu 12.10 (Quantal Quetzal):	DNE
Ubuntu 13.04 (Raring Ringtail):	DNE

More Information

Updated: 2013-02-05 16:14:35 UTC (commit 6372)