CVE-2013-0313
Priority
Medium
Description
The evm_update_evmxattr function in security/integrity/evm/evm_crypto.c in
the Linux kernel before 3.7.5, when the Extended Verification Module (EVM)
is enabled, allows local users to cause a denial of service (NULL pointer
dereference and system crash) or possibly have unspecified other impact via
an attempted removexattr operation on an inode of a sockfs filesystem.
the Linux kernel before 3.7.5, when the Extended Verification Module (EVM)
is enabled, allows local users to cause a denial of service (NULL pointer
dereference and system crash) or possibly have unspecified other impact via
an attempted removexattr operation on an inode of a sockfs filesystem.
Ubuntu-Description
A flaw was discovered in the Extended Verification Module (EVM) of the
Linux kernel. An unprivileged local user code exploit this flaw to cause a
denial of service (system crash).
Linux kernel. An unprivileged local user code exploit this flaw to cause a
denial of service (system crash).
References
Notes
henrix> EVM wasn't merged before 3.2, thus not applicable before Precise
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.2.0-1615.23) |
| Ubuntu 12.10 (Quantal Quetzal): | released (3.5.0-1610.14) |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | not-affected |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | not-affected |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | ignored (abandoned) |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | ignored (abandoned) |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | ignored (abandoned) |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | ignored (abandoned) |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (abandoned) |
| Ubuntu 11.10 (Oneiric Ocelot): | ignored (abandoned) |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | ignored (abandoned) |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.5.0-26.40~precise1) |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
Patches:
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (reached end-of-life) |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (reached end-of-life) |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 8.04 LTS (Hardy Heron): | not-affected |
| Ubuntu 10.04 LTS (Lucid Lynx): | not-affected |
| Ubuntu 11.10 (Oneiric Ocelot): | not-affected |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.2.0-39.62) |
| Ubuntu 12.10 (Quantal Quetzal): | released (3.5.0-26.40) |
| Ubuntu 13.04 (Raring Ringtail): | not-affected (3.8.0-3.7) |
Patches:
| Introduced by 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 | Fixed by a67adb997419fb53540d4a4f79c6471c60bc69b6 |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | not-affected |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (3.2.0-1427.36) |
| Ubuntu 12.10 (Quantal Quetzal): | released (3.5.0-221.30) |
| Ubuntu 13.04 (Raring Ringtail): | not-affected (3.5.0-221.30) |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | DNE |
| Ubuntu 11.10 (Oneiric Ocelot): | ignored (abandoned) |
| Ubuntu 12.04 LTS (Precise Pangolin): | ignored (abandoned) |
| Ubuntu 12.10 (Quantal Quetzal): | ignored (abandoned) |
| Ubuntu 13.04 (Raring Ringtail): | ignored (abandoned) |
Package
| Upstream: | released (3.8~rc5) |
| Ubuntu 8.04 LTS (Hardy Heron): | DNE |
| Ubuntu 10.04 LTS (Lucid Lynx): | ignored (reached end-of-life, does not affect buildd) |
| Ubuntu 11.10 (Oneiric Ocelot): | DNE |
| Ubuntu 12.04 LTS (Precise Pangolin): | DNE |
| Ubuntu 12.10 (Quantal Quetzal): | DNE |
| Ubuntu 13.04 (Raring Ringtail): | DNE |