CVE-2012-3510
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| linux (Ubuntu) |
Low
|
Unassigned | |||
| Hardy |
Low
|
Unassigned | |||
| Lucid |
Low
|
Unassigned | |||
| Natty |
Low
|
Unassigned | |||
| Oneiric |
Low
|
Unassigned | |||
| Precise |
Low
|
Unassigned | |||
| Quantal |
Low
|
Unassigned | |||
| linux-armadaxp (Ubuntu) |
Low
|
Unassigned | |||
| Hardy |
Low
|
Unassigned | |||
| Lucid |
Low
|
Unassigned | |||
| Natty |
Low
|
Unassigned | |||
| Oneiric |
Low
|
Unassigned | |||
| Precise |
Low
|
Unassigned | |||
| Quantal |
Low
|
Unassigned | |||
| linux-ec2 (Ubuntu) |
Low
|
Unassigned | |||
| Hardy |
Low
|
Unassigned | |||
| Lucid |
Low
|
Unassigned | |||
| Natty |
Low
|
Unassigned | |||
| Oneiric |
Low
|
Unassigned | |||
| Precise |
Low
|
Unassigned | |||
| Quantal |
Low
|
Unassigned | |||
| linux-fsl-imx51 (Ubuntu) |
Low
|
Unassigned | |||
| Hardy |
Low
|
Unassigned | |||
| Lucid |
Low
|
Unassigned | |||
| Natty |
Low
|
Unassigned | |||
| Oneiric |
Low
|
Unassigned | |||
| Precise |
Low
|
Unassigned | |||
| Quantal |
Low
|
Unassigned | |||
| linux-lts-backport-maverick (Ubuntu) |
Low
|
Unassigned | |||
| Hardy |
Low
|
Unassigned | |||
| Lucid |
Low
|
Unassigned | |||
| Natty |
Low
|
Unassigned | |||
| Oneiric |
Low
|
Unassigned | |||
| Precise |
Low
|
Unassigned | |||
| Quantal |
Low
|
Unassigned | |||
| linux-lts-backport-natty (Ubuntu) |
Low
|
Unassigned | |||
| Hardy |
Low
|
Unassigned | |||
| Lucid |
Low
|
Unassigned | |||
| Natty |
Low
|
Unassigned | |||
| Oneiric |
Low
|
Unassigned | |||
| Precise |
Low
|
Unassigned | |||
| Quantal |
Low
|
Unassigned | |||
| linux-lts-backport-oneiric (Ubuntu) |
Low
|
Unassigned | |||
| Hardy |
Low
|
Unassigned | |||
| Lucid |
Low
|
Unassigned | |||
| Natty |
Low
|
Unassigned | |||
| Oneiric |
Low
|
Unassigned | |||
| Precise |
Low
|
Unassigned | |||
| Quantal |
Low
|
Unassigned | |||
| linux-mvl-dove (Ubuntu) |
Low
|
Unassigned | |||
| Hardy |
Low
|
Unassigned | |||
| Lucid |
Low
|
Unassigned | |||
| Natty |
Low
|
Unassigned | |||
| Oneiric |
Low
|
Unassigned | |||
| Precise |
Low
|
Unassigned | |||
| Quantal |
Low
|
Unassigned | |||
| linux-ti-omap4 (Ubuntu) |
Low
|
Unassigned | |||
| Hardy |
Low
|
Unassigned | |||
| Lucid |
Low
|
Unassigned | |||
| Natty |
Low
|
Unassigned | |||
| Oneiric |
Low
|
Unassigned | |||
| Precise |
Low
|
Unassigned | |||
| Quantal |
Low
|
Unassigned | |||
Bug Description
Use-after-free vulnerability in the xacct_add_tsk function in kernel/tsacct.c in the Linux kernel before 2.6.19 allows local users to obtain potentially sensitive information from kernel memory or cause a denial of service (system crash) via a taskstats TASKSTATS_
Break-Fix: 9acc1853519a047
CVE References
| John Johansen (jjohansen) wrote : | #1 |
| Changed in linux-lts-backport-natty (Ubuntu Natty): | |
| importance: | Undecided → Low |
| Changed in linux-mvl-dove (Ubuntu Precise): | |
| importance: | Undecided → Low |
| Changed in linux-mvl-dove (Ubuntu Oneiric): | |
| importance: | Undecided → Low |
| Changed in linux-mvl-dove (Ubuntu Lucid): | |
| status: | New → Invalid |
| importance: | Undecided → Low |
| Changed in linux-mvl-dove (Ubuntu Quantal): | |
| importance: | Undecided → Low |
| Changed in linux-mvl-dove (Ubuntu Hardy): | |
| importance: | Undecided → Low |
| Changed in linux-mvl-dove (Ubuntu Natty): | |
| importance: | Undecided → Low |
| Changed in linux-lts-backport-maverick (Ubuntu Precise): | |
| importance: | Undecided → Low |
| Changed in linux-lts-backport-maverick (Ubuntu Oneiric): | |
| importance: | Undecided → Low |
| Changed in linux-lts-backport-maverick (Ubuntu Lucid): | |
| status: | New → Invalid |
| importance: | Undecided → Low |
| Changed in linux-lts-backport-maverick (Ubuntu Quantal): | |
| importance: | Undecided → Low |
| Changed in linux-lts-backport-maverick (Ubuntu Hardy): | |
| importance: | Undecided → Low |
| Changed in linux-lts-backport-maverick (Ubuntu Natty): | |
| importance: | Undecided → Low |
| Changed in linux (Ubuntu Precise): | |
| importance: | Undecided → Low |
| Changed in linux (Ubuntu Oneiric): | |
| importance: | Undecided → Low |
| Changed in linux (Ubuntu Lucid): | |
| importance: | Undecided → Low |
| Changed in linux (Ubuntu Quantal): | |
| importance: | Undecided → Low |
| Changed in linux (Ubuntu Hardy): | |
| importance: | Undecided → Low |
| Changed in linux (Ubuntu Natty): | |
| importance: | Undecided → Low |
| Changed in linux-ti-omap4 (Ubuntu Precise): | |
| importance: | Undecided → Low |
| Changed in linux-ti-omap4 (Ubuntu Oneiric): | |
| importance: | Undecided → Low |
| Changed in linux-ti-omap4 (Ubuntu Lucid): | |
| importance: | Undecided → Low |
| Changed in linux-ti-omap4 (Ubuntu Quantal): | |
| importance: | Undecided → Low |
| Changed in linux-ti-omap4 (Ubuntu Hardy): | |
| importance: | Undecided → Low |
| Changed in linux-ti-omap4 (Ubuntu Natty): | |
| importance: | Undecided → Low |
| Changed in linux-fsl-imx51 (Ubuntu Precise): | |
| importance: | Undecided → Low |
| Changed in linux-fsl-imx51 (Ubuntu Oneiric): | |
| importance: | Undecided → Low |
| Changed in linux-fsl-imx51 (Ubuntu Lucid): | |
| status: | New → Invalid |
| importance: | Undecided → Low |
| Changed in linux-fsl-imx51 (Ubuntu Quantal): | |
| importance: | Undecided → Low |
| Changed in linux-fsl-imx51 (Ubuntu Hardy): | |
| importance: | Undecided → Low |
| Changed in linux-fsl-imx51 (Ubuntu Natty): | |
| importance: | Undecided → Low |
| Tim Gardner (timg-tpi) wrote : | #2 |
The original patch that caused the theoretical vulnerability was introduced in v2.6.19-rc1, the fix was introduced in v2.6.19-rc4.
| Changed in linux (Ubuntu Precise): | |
| status: | Fix Released → New |
| Changed in linux (Ubuntu Oneiric): | |
| status: | Fix Released → New |
| Changed in linux (Ubuntu Lucid): | |
| status: | Fix Released → New |
| Changed in linux (Ubuntu Quantal): | |
| status: | Fix Released → New |
| Changed in linux (Ubuntu Hardy): | |
| status: | Fix Released → New |
| Changed in linux (Ubuntu Natty): | |
| status: | Fix Released → New |
| Changed in linux-armadaxp (Ubuntu Precise): | |
| status: | New → Invalid |
| Changed in linux-armadaxp (Ubuntu Quantal): | |
| status: | New → Invalid |
| Changed in linux-ec2 (Ubuntu Lucid): | |
| status: | New → Fix Committed |
| Changed in linux-lts-backport-oneiric (Ubuntu Lucid): | |
| status: | New → Fix Committed |
| Changed in linux-lts-backport-natty (Ubuntu Lucid): | |
| status: | New → Fix Committed |
| Changed in linux (Ubuntu Precise): | |
| status: | New → Fix Committed |
| Changed in linux (Ubuntu Oneiric): | |
| status: | New → Fix Committed |
| Changed in linux (Ubuntu Lucid): | |
| status: | New → Fix Committed |
| Changed in linux (Ubuntu Quantal): | |
| status: | New → Invalid |
| Changed in linux (Ubuntu Hardy): | |
| status: | New → Fix Committed |
| Changed in linux (Ubuntu Natty): | |
| status: | New → Fix Committed |
| Changed in linux-ti-omap4 (Ubuntu Precise): | |
| status: | New → Fix Committed |
| Changed in linux-ti-omap4 (Ubuntu Oneiric): | |
| status: | New → Fix Committed |
| Changed in linux-ti-omap4 (Ubuntu Quantal): | |
| status: | New → Invalid |
| Changed in linux-ti-omap4 (Ubuntu Natty): | |
| status: | New → Fix Committed |
| description: | updated |
| description: | updated |
| Jamie Strandboge (jdstrand) wrote : | #3 |
Thank you for reporting this bug to Ubuntu. hardy has reached EOL
(End of Life) for this package and is no longer supported. As
a result, this bug against hardy is being marked "Won't Fix".
Please see https:/
supported Ubuntu releases.
Please feel free to report any other bugs you may find.
| Jamie Strandboge (jdstrand) wrote : | #4 |
Thank you for reporting this bug to Ubuntu. lucid has reached EOL
(End of Life) for this package and is no longer supported. As
a result, this bug against lucid is being marked "Won't Fix".
Please see https:/
supported Ubuntu releases.
Please feel free to report any other bugs you may find.
| Jamie Strandboge (jdstrand) wrote : | #5 |
Thank you for reporting this bug to Ubuntu. natty has reached EOL
(End of Life) for this package and is no longer supported. As
a result, this bug against natty is being marked "Won't Fix".
Please see https:/
supported Ubuntu releases.
Please feel free to report any other bugs you may find.
| Jamie Strandboge (jdstrand) wrote : | #6 |
Thank you for reporting this bug to Ubuntu. oneiric has reached EOL
(End of Life) for this package and is no longer supported. As
a result, this bug against oneiric is being marked "Won't Fix".
Please see https:/
supported Ubuntu releases.
Please feel free to report any other bugs you may find.
| Jamie Strandboge (jdstrand) wrote : | #7 |
Thank you for reporting this bug to Ubuntu. precise has reached EOL
(End of Life) for this package and is no longer supported. As
a result, this bug against precise is being marked "Won't Fix".
Please see https:/
supported Ubuntu releases.
Please feel free to report any other bugs you may find.
| Jamie Strandboge (jdstrand) wrote : | #8 |
Undoing inadvertent change.
| Changed in linux-lts-backport-natty (Ubuntu Lucid): | |
| status: | Fix Committed → Won't Fix |
| Jamie Strandboge (jdstrand) wrote : | #9 |
Thank you for reporting this bug to Ubuntu. natty has reached EOL
(End of Life) for this package and is no longer supported. As
a result, this bug against natty is being marked "Won't Fix".
Please see https:/
supported Ubuntu releases.
Please feel free to report any other bugs you may find.
| Jamie Strandboge (jdstrand) wrote : | #10 |
Thank you for reporting this bug to Ubuntu. oneiric has reached EOL
(End of Life) for this package and is no longer supported. As
a result, this bug against oneiric is being marked "Won't Fix".
Please see https:/
supported Ubuntu releases.
Please feel free to report any other bugs you may find.
CVE-2012-3510