Linux kernel (EC2) vulnerabilities

2012-08-1000:00:00

ubuntu.com

6.9 Medium

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

5.2%

JSON

Releases

Ubuntu 10.04

Packages

linux-ec2 - Linux kernel for EC2

Details

An error was discovered in the Linux kernel’s network TUN/TAP device
implementation. A local user with access to the TUN/TAP interface (which is
not available to unprivileged users until granted by a root user) could
exploit this flaw to crash the system or potential gain administrative
privileges. (CVE-2012-2136)

An error was discovered in the Linux kernel’s memory subsystem (hugetlb).
An unprivileged local user could exploit this flaw to cause a denial of
service (crash the system). (CVE-2012-2390)

OSVersionArchitecturePackageVersionFilename
Ubuntu10.04noarchlinux-image-2.6.32-347-ec2< 2.6.32-347.52UNKNOWN
Ubuntu10.04noarchlinux-headers-2.6.32-347-ec2< 2.6.32-347.52UNKNOWN