*** This bug is a security vulnerability *** Public security bug reported:
Multiple buffer underflows in the XFS implementation in the Linux kernel through 3.12.1 allow local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging the CAP_SYS_ADMIN capability for a (1) XFS_IOC_ATTRLIST_BY_HANDLE or (2) XFS_IOC_ATTRLIST_BY_HANDLE_32 ioctl call with a crafted length value, related to the xfs_attrlist_by_handle function in fs/xfs/xfs_ioctl.c and the xfs_compat_attrlist_by_handle function in fs/xfs/xfs_ioctl32.c. ** Affects: linux (Ubuntu) Importance: Low Status: New ** Affects: linux-armadaxp (Ubuntu) Importance: Low Status: Invalid ** Affects: linux-ec2 (Ubuntu) Importance: Low Status: Invalid ** Affects: linux-fsl-imx51 (Ubuntu) Importance: Low Status: Invalid ** Affects: linux-lts-backport-maverick (Ubuntu) Importance: Undecided Status: New ** Affects: linux-lts-backport-natty (Ubuntu) Importance: Undecided Status: New ** Affects: linux-lts-quantal (Ubuntu) Importance: Low Status: Invalid ** Affects: linux-lts-raring (Ubuntu) Importance: Low Status: Invalid ** Affects: linux-lts-saucy (Ubuntu) Importance: Low Status: Invalid ** Affects: linux-mvl-dove (Ubuntu) Importance: Low Status: Invalid ** Affects: linux-ti-omap4 (Ubuntu) Importance: Low Status: New ** Affects: linux (Ubuntu Lucid) Importance: Low Status: New ** Affects: linux-armadaxp (Ubuntu Lucid) Importance: Low Status: Invalid ** Affects: linux-ec2 (Ubuntu Lucid) Importance: Low Status: New ** Affects: linux-fsl-imx51 (Ubuntu Lucid) Importance: Low Status: Invalid ** Affects: linux-lts-backport-maverick (Ubuntu Lucid) Importance: Undecided Status: New ** Affects: linux-lts-backport-natty (Ubuntu Lucid) Importance: Undecided Status: New ** Affects: linux-lts-quantal (Ubuntu Lucid) Importance: Low Status: Invalid ** Affects: linux-lts-raring (Ubuntu Lucid) Importance: Low Status: Invalid ** Affects: linux-lts-saucy (Ubuntu Lucid) Importance: Low Status: Invalid ** Affects: linux-mvl-dove (Ubuntu Lucid) Importance: Low Status: Invalid ** Affects: linux-ti-omap4 (Ubuntu Lucid) Importance: Low Status: Invalid ** Affects: linux (Ubuntu Precise) Importance: Low Status: New ** Affects: linux-armadaxp (Ubuntu Precise) Importance: Low Status: New ** Affects: linux-ec2 (Ubuntu Precise) Importance: Low Status: Invalid ** Affects: linux-fsl-imx51 (Ubuntu Precise) Importance: Low Status: Invalid ** Affects: linux-lts-backport-maverick (Ubuntu Precise) Importance: Undecided Status: New ** Affects: linux-lts-backport-natty (Ubuntu Precise) Importance: Undecided Status: New ** Affects: linux-lts-quantal (Ubuntu Precise) Importance: Low Status: New ** Affects: linux-lts-raring (Ubuntu Precise) Importance: Low Status: New ** Affects: linux-lts-saucy (Ubuntu Precise) Importance: Low Status: New ** Affects: linux-mvl-dove (Ubuntu Precise) Importance: Low Status: Invalid ** Affects: linux-ti-omap4 (Ubuntu Precise) Importance: Low Status: New ** Affects: linux (Ubuntu Quantal) Importance: Low Status: New ** Affects: linux-armadaxp (Ubuntu Quantal) Importance: Low Status: New ** Affects: linux-ec2 (Ubuntu Quantal) Importance: Low Status: Invalid ** Affects: linux-fsl-imx51 (Ubuntu Quantal) Importance: Low Status: Invalid ** Affects: linux-lts-backport-maverick (Ubuntu Quantal) Importance: Undecided Status: New ** Affects: linux-lts-backport-natty (Ubuntu Quantal) Importance: Undecided Status: New ** Affects: linux-lts-quantal (Ubuntu Quantal) Importance: Low Status: Invalid ** Affects: linux-lts-raring (Ubuntu Quantal) Importance: Low Status: Invalid ** Affects: linux-lts-saucy (Ubuntu Quantal) Importance: Low Status: Invalid ** Affects: linux-mvl-dove (Ubuntu Quantal) Importance: Low Status: Invalid ** Affects: linux-ti-omap4 (Ubuntu Quantal) Importance: Low Status: New ** Affects: linux (Ubuntu Raring) Importance: Low Status: New ** Affects: linux-armadaxp (Ubuntu Raring) Importance: Low Status: Invalid ** Affects: linux-ec2 (Ubuntu Raring) Importance: Low Status: Invalid ** Affects: linux-fsl-imx51 (Ubuntu Raring) Importance: Low Status: Invalid ** Affects: linux-lts-backport-maverick (Ubuntu Raring) Importance: Undecided Status: New ** Affects: linux-lts-backport-natty (Ubuntu Raring) Importance: Undecided Status: New ** Affects: linux-lts-quantal (Ubuntu Raring) Importance: Low Status: Invalid ** Affects: linux-lts-raring (Ubuntu Raring) Importance: Low Status: Invalid ** Affects: linux-lts-saucy (Ubuntu Raring) Importance: Low Status: Invalid ** Affects: linux-mvl-dove (Ubuntu Raring) Importance: Low Status: Invalid ** Affects: linux-ti-omap4 (Ubuntu Raring) Importance: Low Status: New ** Affects: linux (Ubuntu Saucy) Importance: Low Status: New ** Affects: linux-armadaxp (Ubuntu Saucy) Importance: Low Status: Invalid ** Affects: linux-ec2 (Ubuntu Saucy) Importance: Low Status: Invalid ** Affects: linux-fsl-imx51 (Ubuntu Saucy) Importance: Low Status: Invalid ** Affects: linux-lts-backport-maverick (Ubuntu Saucy) Importance: Undecided Status: New ** Affects: linux-lts-backport-natty (Ubuntu Saucy) Importance: Undecided Status: New ** Affects: linux-lts-quantal (Ubuntu Saucy) Importance: Low Status: Invalid ** Affects: linux-lts-raring (Ubuntu Saucy) Importance: Low Status: Invalid ** Affects: linux-lts-saucy (Ubuntu Saucy) Importance: Low Status: Invalid ** Affects: linux-mvl-dove (Ubuntu Saucy) Importance: Low Status: Invalid ** Affects: linux-ti-omap4 (Ubuntu Saucy) Importance: Low Status: New ** Affects: linux (Ubuntu Trusty) Importance: Low Status: New ** Affects: linux-armadaxp (Ubuntu Trusty) Importance: Low Status: Invalid ** Affects: linux-ec2 (Ubuntu Trusty) Importance: Low Status: Invalid ** Affects: linux-fsl-imx51 (Ubuntu Trusty) Importance: Low Status: Invalid ** Affects: linux-lts-backport-maverick (Ubuntu Trusty) Importance: Undecided Status: New ** Affects: linux-lts-backport-natty (Ubuntu Trusty) Importance: Undecided Status: New ** Affects: linux-lts-quantal (Ubuntu Trusty) Importance: Low Status: Invalid ** Affects: linux-lts-raring (Ubuntu Trusty) Importance: Low Status: Invalid ** Affects: linux-lts-saucy (Ubuntu Trusty) Importance: Low Status: Invalid ** Affects: linux-mvl-dove (Ubuntu Trusty) Importance: Low Status: Invalid ** Affects: linux-ti-omap4 (Ubuntu Trusty) Importance: Low Status: New ** Tags: kernel-cve-tracking-bug ** Tags added: kernel-cve-tracking-bug ** Information type changed from Public to Public Security ** CVE added: http://www.cve.mitre.org/cgi- bin/cvename.cgi?name=2013-6382 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1256091 Title: CVE-2013-6382 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1256091/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs