Ubuntu update for kernel

SA48544

CVE-2011-3347, CVE-2011-4127, CVE-2011-4347, CVE-2012-0045, CVE-2012-1090, CVE-2012-1097, CVE-2012-1146

27 Mar 2012

Less Critical

Vendor Patch

Local system

DoS (Denial of Service)

This includes vulnerabilities ranging from excessive resource consumption (e.g. causing a system to use a lot of memory) to crashing an application or an entire system.

Privilege escalation

This covers vulnerabilities where a user is able to conduct certain tasks with the privileges of other users or administrative users.

This typically includes cases where a local user on a client or server system can gain access to the administrator or root account thus taking full control of the system.

Ubuntu has issued an update for the kernel. This fixes multiple vulnerabilities, which can be exploited by malicious, local users and malicious, local users in a guest virtual machine to cause a DoS (Denial of Service) and gain escalated privileges and by malicious people to cause a DoS (Denial of Service).

For more information:
SA47296
SA47431
SA47482
SA48547

1) The vulnerability is caused due to an error within the "mem_cgroup_usage_unregister_event()" function when several events are attached to an eventfd and can be exploited to cause a kernel oops.

Apply updated packages.

-- Ubuntu 11.10 --
https://launchpad.net/ubuntu/+source/linux/3.0.0-16.29

USN-1405-1:
http://www.ubuntu.com/usn/usn-1405-1