CVE-2013-0228

Priority
Medium
Description
The xen_iret function in arch/x86/xen/xen-asm_32.S in the Linux kernel
before 3.7.9 on 32-bit Xen paravirt_ops platforms does not properly handle
an invalid value in the DS segment register, which allows guest OS users to
gain guest OS privileges via a crafted application.
Ubuntu-Description
Andrew Jones discovered a flaw with the xen_iret function in Linux kernel's
Xen virtualizeation. In the 32-bit Xen paravirt platform an unprivileged
guest OS user could exploit this flaw to cause a denial of service (crash
the system) or gain guest OS privilege.
References
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0228
https://github.com/torvalds/linux/commit/13d2b4d11d69a92574a55bfd985cfb0ca77aebdc
https://bugzilla.redhat.com/show_bug.cgi?id=906309
http://www.openwall.com/lists/oss-security/2013/02/13/10
http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.7.9
http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=13d2b4d11d69a92574a55bfd985cfb0ca77aebdc
http://www.ubuntu.com/usn/usn-1756-1
http://www.ubuntu.com/usn/usn-1760-1
http://www.ubuntu.com/usn/usn-1767-1
http://www.ubuntu.com/usn/usn-1778-1
http://www.ubuntu.com/usn/usn-1781-1
http://www.ubuntu.com/usn/usn-1795-1
http://www.ubuntu.com/usn/usn-1796-1
http://www.ubuntu.com/usn/usn-1797-1
http://www.ubuntu.com/usn/usn-1805-1
http://www.ubuntu.com/usn/usn-1808-1
Bugs
https://launchpad.net/bugs/1143796
Package
Source: linux-armadaxp (LP Ubuntu Debian)
Upstream:released (3.8)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):released (3.2.0-1615.23)
Ubuntu 12.10 (Quantal Quetzal):released (3.5.0-1611.16)
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-ec2 (LP Ubuntu Debian)
Upstream:released (3.8)
Ubuntu 10.04 LTS (Lucid Lynx):released (2.6.32-351.64)
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-lts-backport-oneiric (LP Ubuntu Debian)
Upstream:released (3.8)
Ubuntu 10.04 LTS (Lucid Lynx):released (3.0.0-32.50~lucid1)
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-linaro-shared (LP Ubuntu Debian)
Upstream:released (3.8)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-linaro-vexpress (LP Ubuntu Debian)
Upstream:released (3.8)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-qcm-msm (LP Ubuntu Debian)
Upstream:released (3.8)
Ubuntu 10.04 LTS (Lucid Lynx):ignored (abandoned)
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-lts-quantal (LP Ubuntu Debian)
Upstream:released (3.8)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):released (3.5.0-27.45)
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Patches:
Package
Source: linux-mvl-dove (LP Ubuntu Debian)
Upstream:released (3.8)
Ubuntu 10.04 LTS (Lucid Lynx):ignored (reached end-of-life)
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-lts-backport-maverick (LP Ubuntu Debian)
Upstream:released (3.8)
Ubuntu 10.04 LTS (Lucid Lynx):ignored (reached end-of-life)
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux (LP Ubuntu Debian)
Upstream:released (3.8)
Ubuntu 10.04 LTS (Lucid Lynx):released (2.6.32-46.108)
Ubuntu 12.04 LTS (Precise Pangolin):released (3.2.0-39.62)
Ubuntu 12.10 (Quantal Quetzal):released (3.5.0-27.43)
Ubuntu 13.04 (Raring Ringtail):not-affected (3.8.0-7.14)
Ubuntu 13.10 (Saucy Salamander):not-affected (3.8.0-7.14)
Patches:
Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2Fixed by 13d2b4d11d69a92574a55bfd985cfb0ca77aebdc
Package
Source: linux-ti-omap4 (LP Ubuntu Debian)
Upstream:released (3.8)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):released (3.2.0-1427.36)
Ubuntu 12.10 (Quantal Quetzal):released (3.5.0-222.32)
Ubuntu 13.04 (Raring Ringtail):not-affected (3.5.0-222.32)
Ubuntu 13.10 (Saucy Salamander):not-affected (3.5.0-222.32)
Package
Source: linux-linaro-omap (LP Ubuntu Debian)
Upstream:released (3.8)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):ignored (abandoned)
Ubuntu 12.10 (Quantal Quetzal):ignored (abandoned)
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-fsl-imx51 (LP Ubuntu Debian)
Upstream:released (3.8)
Ubuntu 10.04 LTS (Lucid Lynx):ignored (reached end-of-life, does not affect buildd)
Ubuntu 12.04 LTS (Precise Pangolin):DNE
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
Package
Source: linux-lts-raring (LP Ubuntu Debian)
Upstream:released (3.8)
Ubuntu 10.04 LTS (Lucid Lynx):DNE
Ubuntu 12.04 LTS (Precise Pangolin):not-affected
Ubuntu 12.10 (Quantal Quetzal):DNE
Ubuntu 13.04 (Raring Ringtail):DNE
Ubuntu 13.10 (Saucy Salamander):DNE
More Information

Valid XHTML 1.0 Strict

Updated: 2013-05-10 19:14:58 UTC (commit 6828)