Ubuntu Security Notice 1815-1 - Andy Lutomirski discover an error in the Linux kernel's credential handling on unix sockets. A local user could exploit this flaw to gain administrative privileges. Andy Lutomirski discovered a privilege escalation in the Linux kernel's user namespaces. A local user could exploit the flaw to gain administrative privileges.
d7e3f35ae144f5755ed1c27567bd8f421a30bbc3f32a069ad759830fde991224
==========================================================================
Ubuntu Security Notice USN-1815-1
May 02, 2013
linux vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 13.04
Summary:
Several security issues were fixed in the kernel.
Software Description:
- linux: Linux kernel
Details:
Andy Lutomirski discover an error in the Linux kernel's credential handling
on unix sockets. A local user could exploit this flaw to gain
administrative privileges. (CVE-2013-1979)
Andy Lutomirski discovered a privilege escalation in the Linux kernel's
user namespaces. A local user could exploit the flaw to gain administrative
privileges. (CVE-2013-1959)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 13.04:
linux-image-3.8.0-19-generic 3.8.0-19.30
After a standard system update you need to reboot your computer to make
all the necessary changes.
References:
http://www.ubuntu.com/usn/usn-1815-1
CVE-2013-1959, CVE-2013-1979
Package Information:
https://launchpad.net/ubuntu/+source/linux/3.8.0-19.30