[USN-1405-1] Linux kernel vulnerabilities

Severity High

CVEs 2

Several security issues were fixed in the kernel.

Paolo Bonzini discovered a flaw in Linux's handling of the SG_IO ioctl
command. A local user, or user in a VM could exploit this flaw to bypass
restrictions and gain read/write access to all data on the affected block
device. (CVE-2011-4127)

A flaw was found in the Linux kernel's ext4 file system when mounting a
corrupt filesystem. A user-assisted remote attacker could exploit this flaw
to cause a denial of service. (CVE-2012-2100)

ID

USN-1405-1

Severity

high

Severity from

CVE-2012-2100

URL

https://ubuntu.com/security/notices/USN-1405-1

Published