CVE-2012-3430

Priority
Low
Description
The rds_recvmsg function in net/rds/recv.c in the Linux kernel before
3.0.44 does not initialize a certain structure member, which allows local
users to obtain potentially sensitive information from kernel stack memory
via a (1) recvfrom or (2) recvmsg system call on an RDS socket.
Ubuntu-Description
Jay Fenlason and Doug Ledford discovered a bug in the Linux kernel
implementation of RDS sockets. A local unprivileged user could potentially
use this flaw to read privileged information from the kernel.
References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3430
http://www.openwall.com/lists/oss-security/2012/07/26/3
http://www.ubuntu.com/usn/usn-1567-1
http://www.ubuntu.com/usn/usn-1568-1
http://www.ubuntu.com/usn/usn-1572-1
http://www.ubuntu.com/usn/usn-1573-1
http://www.ubuntu.com/usn/usn-1574-1
http://www.ubuntu.com/usn/usn-1575-1
http://www.ubuntu.com/usn/usn-1260-1
http://www.ubuntu.com/usn/usn-1577-1
http://www.ubuntu.com/usn/usn-1578-1
http://www.ubuntu.com/usn/usn-1579-1
http://www.ubuntu.com/usn/usn-1580-1
Bugs
https://launchpad.net/bugs/1031112
Notes
jdstrand> linux-armadaxp is maintained by OEM
Package
Source: linux-armadaxp (LP Ubuntu Debian)
Upstream:released (3.6~rc1)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 11.04 (Natty Narwhal):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):released (3.2.0-1608.12)
Ubuntu 12.10 (Quantal Quetzal):not-affected (3.2.0-1608.12)
Package
Source: linux-ec2 (LP Ubuntu Debian)
Upstream:released (3.6~rc1)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):released (2.6.32-348.54)
Ubuntu 11.04 (Natty Narwhal):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Package
Source: linux-lts-backport-oneiric (LP Ubuntu Debian)
Upstream:released (3.6~rc1)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):released (3.0.0-26.42~lucid1)
Ubuntu 11.04 (Natty Narwhal):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Package
Source: linux-linaro-shared (LP Ubuntu Debian)
Upstream:released (3.6~rc1)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 11.04 (Natty Narwhal):DNE
Ubuntu 11.10 (Oneiric Ocelot):ignored (abandoned)
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Package
Source: linux-linaro-vexpress (LP Ubuntu Debian)
Upstream:released (3.6~rc1)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 11.04 (Natty Narwhal):ignored (abandoned)
Ubuntu 11.10 (Oneiric Ocelot):ignored (abandoned)
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Package
Source: linux-qcm-msm (LP Ubuntu Debian)
Upstream:released (3.6~rc1)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):ignored (abandoned)
Ubuntu 11.04 (Natty Narwhal):ignored (abandoned)
Ubuntu 11.10 (Oneiric Ocelot):ignored (abandoned)
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Package
Source: linux-lts-backport-natty (LP Ubuntu Debian)
Upstream:released (3.6~rc1)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):released (2.6.38-16.67~lucid1)
Ubuntu 11.04 (Natty Narwhal):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Package
Source: linux-mvl-dove (LP Ubuntu Debian)
Upstream:released (3.6~rc1)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):ignored (reached end-of-life)
Ubuntu 11.04 (Natty Narwhal):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Package
Source: linux-lts-backport-maverick (LP Ubuntu Debian)
Upstream:released (3.6~rc1)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):ignored (reached end-of-life)
Ubuntu 11.04 (Natty Narwhal):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Package
Source: linux (LP Ubuntu Debian)
Upstream:released (3.6~rc1)
Ubuntu 8.04 LTS (Hardy Heron):not-affected
Ubuntu 10.04 LTS (Lucid Lynx):released (2.6.32-43.97)
Ubuntu 11.04 (Natty Narwhal):released (2.6.38-16.67)
Ubuntu 11.10 (Oneiric Ocelot):released (3.0.0-26.42)
Ubuntu 12.04 LTS (Precise Pangolin):released (3.2.0-31.49)
Ubuntu 12.10 (Quantal Quetzal):not-affected (3.5.0-11.11)
Patches:
Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2Fixed by 06b6a1cf6e776426766298d055bb3991957d90a7
Package
Source: linux-ti-omap4 (LP Ubuntu Debian)
Upstream:released (3.6~rc1)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 11.04 (Natty Narwhal):released (2.6.38-1209.26)
Ubuntu 11.10 (Oneiric Ocelot):released (3.0.0-1216.28)
Ubuntu 12.04 LTS (Precise Pangolin):released (3.2.0-1419.26)
Ubuntu 12.10 (Quantal Quetzal):not-affected (3.5.0-11.11)
Package
Source: linux-linaro-omap (LP Ubuntu Debian)
Upstream:released (3.6~rc1)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 11.04 (Natty Narwhal):ignored (abandoned)
Ubuntu 11.10 (Oneiric Ocelot):ignored (abandoned)
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Package
Source: linux-fsl-imx51 (LP Ubuntu Debian)
Upstream:released (3.6~rc1)
Ubuntu 8.04 LTS (Hardy Heron):DNE
Ubuntu 10.04 LTS (Lucid Lynx):ignored (reached end-of-life, does not affect buildd)
Ubuntu 11.04 (Natty Narwhal):DNE
Ubuntu 11.10 (Oneiric Ocelot):DNE
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
More Information

Valid XHTML 1.0 Strict

Updated: 2012-10-04 18:14:32 UTC (commit 5863)