5

I read about the 64 bit kernel vulnerability in the linux kernel today (9/20) Link to article

I have an ubuntu server 10.04 and 8.04 in my organization. My question is could I just use the apt-get utility or the aptitude safe-upgrade to patch these kernels - but is the 64 bit kernel patch included in those updates I would download?

10

You should have gotten them through the updates... according to this they went out the 17th:

http://www.ubuntu.com/usn/usn-988-1

3

When wondering about these things, you can always check the changelog files for your installed kernels. For example, first make sure you're up to date:

$ sudo apt-get update

$ sudo apt-get dist-upgrade

Then you can check what happened in the latest kernel update:

$ cd $(ls -dtr /usr/share/doc/linux-image-* | tail -n1)

$ zcat changelog.Debian.gz | head -n10

linux (2.6.32-24.43) lucid-security; urgency=low

  [ Upstream Kernel Changes ]

  * x86-64, compat: Test %rax for the syscall number, not %eax
    - CVE-2010-3301
      * x86-64, compat: Retruncate rax after ia32 syscall entry tracing
    - CVE-2010-3301
  * compat: Make compat_alloc_user_space() incorporate the access_ok()
    - CVE-2010-3081

Then you can compare what kernel you have running against the latest changelog, and reboot if you haven't already:

$ cat /proc/version_signature

 Ubuntu 2.6.32-24.43-server 2.6.32.15+drm33.5
  • Wow this is a good answer too. Thanks for the info. – Jeremy Hajek Nov 18 '10 at 3:31

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.