Ubuntu
linux-lts-backport-maverick package

CVE-2012-0028

Bug #927889 reported by John Johansen on 2012-02-06

258

This bug affects 1 person

	Status	Importance	Assigned to
linux (Ubuntu)	Invalid	Medium	Unassigned
Lucid	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Quantal	Invalid	Medium	Unassigned
Raring	Invalid	Medium	Unassigned
Saucy	Invalid	Medium	Unassigned
linux-armadaxp (Ubuntu)	Invalid	Medium	Unassigned
Lucid	Invalid	Medium	Unassigned
Precise	Fix Released	Medium	Unassigned
Quantal	Fix Released	Medium	Unassigned
Raring	Invalid	Medium	Unassigned
Saucy	Invalid	Medium	Unassigned
linux-ec2 (Ubuntu)	Invalid	Medium	Unassigned
Lucid	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Quantal	Invalid	Medium	Unassigned
Raring	Invalid	Medium	Unassigned
Saucy	Invalid	Medium	Unassigned
linux-fsl-imx51 (Ubuntu)	Invalid	Medium	Unassigned
Lucid	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Quantal	Invalid	Medium	Unassigned
Raring	Invalid	Medium	Unassigned
Saucy	Invalid	Medium	Unassigned
linux-lts-backport-maverick (Ubuntu)	Invalid	Medium	Unassigned
Lucid	Fix Released	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Quantal	Invalid	Medium	Unassigned
Raring	Invalid	Medium	Unassigned
Saucy	Invalid	Medium	Unassigned
linux-lts-backport-natty (Ubuntu)	Invalid	Medium	Unassigned
Lucid	Won't Fix	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Quantal	Invalid	Medium	Unassigned
Raring	Invalid	Medium	Unassigned
Saucy	Invalid	Medium	Unassigned
linux-lts-backport-oneiric (Ubuntu)	Invalid	Medium	Unassigned
Lucid	Won't Fix	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Quantal	Invalid	Medium	Unassigned
Raring	Invalid	Medium	Unassigned
Saucy	Invalid	Medium	Unassigned
linux-lts-quantal (Ubuntu)	Invalid	Medium	Unassigned
Lucid	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Quantal	Invalid	Medium	Unassigned
Raring	Invalid	Medium	Unassigned
Saucy	Invalid	Medium	Unassigned
linux-lts-raring (Ubuntu)	Invalid	Medium	Unassigned
Lucid	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Quantal	Invalid	Medium	Unassigned
Raring	Invalid	Medium	Unassigned
Saucy	Invalid	Medium	Unassigned
linux-mvl-dove (Ubuntu)	Invalid	Medium	Unassigned
Lucid	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Quantal	Invalid	Medium	Unassigned
Raring	Invalid	Medium	Unassigned
Saucy	Invalid	Medium	Unassigned
linux-ti-omap4 (Ubuntu)	Invalid	Medium	Unassigned
Lucid	Invalid	Medium	Unassigned
Precise	Invalid	Medium	Unassigned
Quantal	Invalid	Medium	Unassigned
Raring	Invalid	Medium	Unassigned
Saucy	Invalid	Medium	Unassigned

Bug Description

The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process.

Break-Fix: - 8141c7f3e7aee618312fa1c15109e1219de784a7
Break-Fix: - fc6b177dee33365ccb29fe6d2092223cf8d679f9

See original description

Tags:

CVE References

Revision history for this message

John Johansen (jjohansen) wrote on 2012-02-06:

CVE-2012-0028

tags:	added: kernel-cve-tracking-bug
security vulnerability:	no → yes
security vulnerability:	no → yes
Changed in linux-ec2 (Ubuntu Oneiric):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Precise):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Hardy):
status:	New → Invalid
Changed in linux-ec2 (Ubuntu Natty):
status:	New → Invalid
Changed in linux-lts-backport-oneiric (Ubuntu Oneiric):
status:	New → Invalid
Changed in linux-lts-backport-oneiric (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-backport-oneiric (Ubuntu Hardy):
status:	New → Invalid
Changed in linux-lts-backport-oneiric (Ubuntu Maverick):
status:	New → Invalid
Changed in linux-lts-backport-oneiric (Ubuntu Natty):
status:	New → Invalid
Changed in linux-lts-backport-natty (Ubuntu Oneiric):
status:	New → Invalid
Changed in linux-lts-backport-natty (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-backport-natty (Ubuntu Hardy):
status:	New → Invalid
Changed in linux-lts-backport-natty (Ubuntu Maverick):
status:	New → Invalid
Changed in linux-lts-backport-natty (Ubuntu Natty):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Oneiric):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Precise):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Hardy):
status:	New → Invalid
Changed in linux-mvl-dove (Ubuntu Natty):
status:	New → Invalid
Changed in linux-lts-backport-maverick (Ubuntu Oneiric):
status:	New → Invalid
Changed in linux-lts-backport-maverick (Ubuntu Precise):
status:	New → Invalid
Changed in linux-lts-backport-maverick (Ubuntu Hardy):
status:	New → Invalid
Changed in linux-lts-backport-maverick (Ubuntu Maverick):
status:	New → Invalid
Changed in linux-lts-backport-maverick (Ubuntu Natty):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Lucid):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Hardy):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Oneiric):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Precise):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Hardy):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Maverick):
status:	New → Invalid
Changed in linux-fsl-imx51 (Ubuntu Natty):
status:	New → Invalid
description:	updated
Changed in linux-ec2 (Ubuntu Oneiric):
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Hardy):
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Maverick):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-ec2 (Ubuntu Natty):
importance:	Undecided → Medium
Changed in linux-lts-backport-oneiric (Ubuntu Oneiric):
importance:	Undecided → Medium
Changed in linux-lts-backport-oneiric (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux-lts-backport-oneiric (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-backport-oneiric (Ubuntu Hardy):
importance:	Undecided → Medium
Changed in linux-lts-backport-oneiric (Ubuntu Maverick):
importance:	Undecided → Medium
Changed in linux-lts-backport-oneiric (Ubuntu Natty):
importance:	Undecided → Medium
Changed in linux-lts-backport-natty (Ubuntu Oneiric):
importance:	Undecided → Medium
Changed in linux-lts-backport-natty (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux-lts-backport-natty (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-backport-natty (Ubuntu Hardy):
importance:	Undecided → Medium
Changed in linux-lts-backport-natty (Ubuntu Maverick):
importance:	Undecided → Medium
Changed in linux-lts-backport-natty (Ubuntu Natty):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Oneiric):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Lucid):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Hardy):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Maverick):
importance:	Undecided → Medium
Changed in linux-mvl-dove (Ubuntu Natty):
importance:	Undecided → Medium
Changed in linux-lts-backport-maverick (Ubuntu Oneiric):
importance:	Undecided → Medium
Changed in linux-lts-backport-maverick (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux-lts-backport-maverick (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-lts-backport-maverick (Ubuntu Hardy):
importance:	Undecided → Medium
Changed in linux-lts-backport-maverick (Ubuntu Maverick):
importance:	Undecided → Medium
Changed in linux-lts-backport-maverick (Ubuntu Natty):
importance:	Undecided → Medium

John Johansen (jjohansen) on 2012-02-06

Changed in linux (Ubuntu Oneiric):
importance:	Undecided → Medium
Changed in linux (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux (Ubuntu Hardy):
importance:	Undecided → Medium
Changed in linux (Ubuntu Maverick):
importance:	Undecided → Medium
Changed in linux (Ubuntu Natty):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Oneiric):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Hardy):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Maverick):
importance:	Undecided → Medium
Changed in linux-ti-omap4 (Ubuntu Natty):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Oneiric):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Lucid):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Hardy):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Maverick):
importance:	Undecided → Medium
Changed in linux-fsl-imx51 (Ubuntu Natty):
importance:	Undecided → Medium

John Johansen (jjohansen) on 2012-02-08

Changed in linux-ec2 (Ubuntu Lucid):
status:	New → Fix Committed
Changed in linux-lts-backport-oneiric (Ubuntu Lucid):
status:	New → Fix Committed
Changed in linux-lts-backport-natty (Ubuntu Lucid):
status:	New → Fix Committed
Changed in linux-mvl-dove (Ubuntu Maverick):
status:	New → Fix Committed
Changed in linux-lts-backport-maverick (Ubuntu Lucid):
status:	New → Fix Committed
Changed in linux (Ubuntu Oneiric):
status:	New → Fix Committed
Changed in linux (Ubuntu Lucid):
status:	New → Fix Committed
Changed in linux (Ubuntu Precise):
status:	New → Invalid
Changed in linux (Ubuntu Maverick):
status:	New → Fix Committed
Changed in linux (Ubuntu Natty):
status:	New → Fix Committed
Changed in linux-ti-omap4 (Ubuntu Oneiric):
status:	New → Fix Committed
Changed in linux-ti-omap4 (Ubuntu Precise):
status:	New → Invalid
Changed in linux-ti-omap4 (Ubuntu Maverick):
status:	New → Fix Committed
Changed in linux-ti-omap4 (Ubuntu Natty):
status:	New → Fix Committed
Changed in linux-fsl-imx51 (Ubuntu Lucid):
status:	New → Fix Committed

Andy Whitcroft (apw) on 2012-02-08

Changed in linux (Ubuntu Hardy):
assignee:	nobody → Andy Whitcroft (apw)
status:	New → In Progress

John Johansen (jjohansen) on 2012-02-09

Changed in linux (Ubuntu Hardy):
status:	In Progress → Fix Committed

Revision history for this message

Launchpad Janitor (janitor) wrote on 2012-03-05:

This bug was fixed in the package linux - 2.6.24-31.99

---------------
linux (2.6.24-31.99) hardy-proposed; urgency=low

[Herton R. Krzesinski]

* Release Tracking Bug
- LP: #931627

[Andy Whitcroft]

* debian -- validate patches are applied to openvz etc

[Stefan Bader]

  * SAUCE: Return deny all as default in encode_share_access
    - LP: #917829
    - CVE-2011-4324

[Tim Gardner]

  * [Config] Generate patch set from flattened sources
  * [Config] Added apply-patch-to-binary-custom
  * [Config] Flattened openvz
  * [Config] Flattened xen

[Upstream Kernel Changes]

  * sound/oss: remove offset from load_patch callbacks
    - LP: #925337
    - CVE-2011-1476
  * sound/oss/opl3: validate voice and channel indexes
    - LP: #925335
    - CVE-2011-1477
  * Fix for buffer overflow in ldm_frag_add not sufficient
    - LP: #922371
    - CVE-2011-2182
  * Move "exit_robust_list" into mm_release()
    - LP: #927889
    - CVE-2012-0028
  * futex: Nullify robust lists after cleanup
    - LP: #927889
    - CVE-2012-0028
-- Herton Ronaldo Krzesinski <email address hidden> Mon, 13 Feb 2012 17:25:53 -0200

Changed in linux (Ubuntu Hardy):
status:	Fix Committed → Fix Released

John Johansen (jjohansen) on 2012-04-17

Changed in linux-mvl-dove (Ubuntu Maverick):
status:	Fix Committed → Invalid
Changed in linux (Ubuntu Maverick):
status:	Fix Committed → Invalid
Changed in linux-ti-omap4 (Ubuntu Maverick):
status:	Fix Committed → Invalid
Changed in linux-lts-backport-maverick (Ubuntu Lucid):
status:	Fix Committed → Fix Released

John Johansen (jjohansen) on 2012-05-01

Changed in linux-armadaxp (Ubuntu Maverick):
status:	New → Invalid

John Johansen (jjohansen) on 2012-05-01

Changed in linux-armadaxp (Ubuntu Precise):
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Oneiric):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Lucid):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Hardy):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-armadaxp (Ubuntu Natty):
status:	New → Invalid
importance:	Undecided → Medium

John Johansen (jjohansen) on 2012-05-03

Changed in linux-armadaxp (Ubuntu Precise):
status:	New → Fix Committed

John Johansen (jjohansen) on 2012-05-04

Changed in linux-armadaxp (Ubuntu Quantal):
status:	New → Fix Committed
importance:	Undecided → Medium

John Johansen (jjohansen) on 2012-06-29

description:

updated

Ike Panhc (ikepanhc) on 2012-09-20

Changed in linux-armadaxp (Ubuntu Precise):
status:	Fix Committed → Fix Released
Changed in linux-armadaxp (Ubuntu Quantal):
status:	Fix Committed → Fix Released

John Johansen (jjohansen) on 2012-11-06

Changed in linux (Ubuntu Natty):
status:	Fix Committed → Invalid
Changed in linux-ti-omap4 (Ubuntu Natty):
status:	Fix Committed → Invalid

Marc Deslauriers (mdeslaur) on 2012-11-09

no longer affects:	linux-armadaxp (Ubuntu Maverick)
no longer affects:	linux-armadaxp (Ubuntu Natty)
no longer affects:	linux-ec2 (Ubuntu Maverick)
no longer affects:	linux-ec2 (Ubuntu Natty)
no longer affects:	linux-lts-backport-oneiric (Ubuntu Maverick)
no longer affects:	linux-lts-backport-oneiric (Ubuntu Natty)
no longer affects:	linux-lts-backport-natty (Ubuntu Maverick)
no longer affects:	linux-lts-backport-natty (Ubuntu Natty)
no longer affects:	linux-lts-quantal (Ubuntu Maverick)
no longer affects:	linux-lts-quantal (Ubuntu Natty)
no longer affects:	linux-mvl-dove (Ubuntu Maverick)
no longer affects:	linux-mvl-dove (Ubuntu Natty)
no longer affects:	linux-lts-backport-maverick (Ubuntu Maverick)
no longer affects:	linux-lts-backport-maverick (Ubuntu Natty)
no longer affects:	linux (Ubuntu Maverick)
no longer affects:	linux (Ubuntu Natty)
no longer affects:	linux-fsl-imx51 (Ubuntu Maverick)
no longer affects:	linux-fsl-imx51 (Ubuntu Natty)
no longer affects:	linux-ti-omap4 (Ubuntu Maverick)
no longer affects:	linux-ti-omap4 (Ubuntu Natty)
Changed in linux-lts-quantal (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Oneiric):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Lucid):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Hardy):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-quantal (Ubuntu Quantal):
status:	New → Invalid
importance:	Undecided → Medium

Marc Deslauriers (mdeslaur) on 2012-11-09

Changed in linux-lts-quantal (Ubuntu Raring):
status:	New → Invalid
importance:	Undecided → Medium

John Johansen (jjohansen) on 2013-04-09

Changed in linux-armadaxp (Ubuntu Raring):
status:	Fix Released → Invalid

John Johansen (jjohansen) on 2013-05-09

Changed in linux-lts-raring (Ubuntu Precise):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Oneiric):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Lucid):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Saucy):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Hardy):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Quantal):
status:	New → Invalid
importance:	Undecided → Medium
Changed in linux-lts-raring (Ubuntu Raring):
status:	New → Invalid
importance:	Undecided → Medium

John Johansen (jjohansen) on 2013-05-10

no longer affects:	linux-armadaxp (Ubuntu Hardy)
no longer affects:	linux-armadaxp (Ubuntu Oneiric)
no longer affects:	linux-ec2 (Ubuntu Hardy)
no longer affects:	linux-ec2 (Ubuntu Oneiric)
no longer affects:	linux-lts-backport-oneiric (Ubuntu Hardy)
no longer affects:	linux-lts-backport-oneiric (Ubuntu Oneiric)
no longer affects:	linux-lts-backport-natty (Ubuntu Hardy)
no longer affects:	linux-lts-backport-natty (Ubuntu Oneiric)
no longer affects:	linux-lts-quantal (Ubuntu Hardy)
no longer affects:	linux-lts-quantal (Ubuntu Oneiric)
no longer affects:	linux-mvl-dove (Ubuntu Hardy)
no longer affects:	linux-mvl-dove (Ubuntu Oneiric)
no longer affects:	linux-lts-backport-maverick (Ubuntu Hardy)
no longer affects:	linux-lts-backport-maverick (Ubuntu Oneiric)
no longer affects:	linux (Ubuntu Hardy)
no longer affects:	linux (Ubuntu Oneiric)
no longer affects:	linux-fsl-imx51 (Ubuntu Hardy)
no longer affects:	linux-fsl-imx51 (Ubuntu Oneiric)
no longer affects:	linux-ti-omap4 (Ubuntu Hardy)
no longer affects:	linux-ti-omap4 (Ubuntu Oneiric)
no longer affects:	linux-lts-raring (Ubuntu Hardy)
no longer affects:	linux-lts-raring (Ubuntu Oneiric)

Jamie Strandboge (jdstrand) on 2013-05-21

Changed in linux-lts-backport-oneiric (Ubuntu Lucid):
status:	Fix Committed → Won't Fix

Jamie Strandboge (jdstrand) on 2013-05-22

Changed in linux-lts-backport-natty (Ubuntu Lucid):
status:	Fix Committed → Won't Fix

Mathew Hodson (mhodson) on 2015-05-18

Changed in linux-ec2 (Ubuntu Lucid):
status:	Fix Committed → Invalid
Changed in linux (Ubuntu Lucid):
status:	Fix Committed → Invalid
Changed in linux-fsl-imx51 (Ubuntu Lucid):
status:	Fix Committed → Invalid

Report a bug

This report contains Public Security information

Everyone can see this security related information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.

Ubuntulinux-lts-backport-maverick package

CVE-2012-0028

Bug Description

CVE References

Other bug subscribers

Remote bug watches

Ubuntu
linux-lts-backport-maverick package