CVE-2011-1833
Publication date9 August 2011
Last updated24 July 2024
Ubuntu priority
Description
Race condition in the ecryptfs_mount function in fs/ecryptfs/main.c in theeCryptfs subsystem in the Linux kernel before 3.1 allows local users tobypass intended file permissions via a mount.ecryptfs_private mount with amismatched uid.
From the Ubuntu Security Team
Vasiliy Kulikov and Dan Rosenberg discovered that ecryptfs did notcorrectly check the origin of mount points. A local attacker could exploitthis to trick the system into unmounting arbitrary mount points, leading toa denial of service.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| linux-ec2 | 11.10oneiric | Not in release |
| 11.04natty | Not in release | |
| 10.10maverick | Ignoredend of life | |
| 10.04 LTSlucid | Fixed2.6.32-319.39 | |
| 8.04 LTShardy | Not in release | |
| ecryptfs-utils | 11.10oneiric | Fixed89-0ubuntu2 |
| 11.04natty | Fixed87-0ubuntu1.1 | |
| 10.10maverick | Fixed83-0ubuntu3.2.10.10.1 | |
| 10.04 LTSlucid | Fixed83-0ubuntu3.2.10.04.1 | |
| 8.04 LTShardy | Not affected | |
| linux | 11.10oneiric | Not affected |
| 11.04natty | Fixed2.6.38-11.49 | |
| 10.10maverick | Fixed2.6.35-30.60 | |
| 10.04 LTSlucid | Fixed2.6.32-35.78 | |
| 8.04 LTShardy | Not affected | |
| linux-fsl-imx51 | 11.10oneiric | Not in release |
| 11.04natty | Not in release | |
| 10.10maverick | Not in release | |
| 10.04 LTSlucid | Fixed2.6.31-610.27 | |
| 8.04 LTShardy | Not in release | |
| linux-lts-backport-maverick | 11.10oneiric | Not in release |
| 11.04natty | Not in release | |
| 10.10maverick | Not in release | |
| 10.04 LTSlucid | Fixed2.6.35-30.60~lucid1 | |
| 8.04 LTShardy | Not in release | |
| linux-lts-backport-natty | 11.10oneiric | Not in release |
| 11.04natty | Not in release | |
| 10.10maverick | Not in release | |
| 10.04 LTSlucid | Fixed2.6.38-11.49~lucid1 | |
| 8.04 LTShardy | Not in release | |
| linux-lts-backport-oneiric | 11.10oneiric | Not in release |
| 11.04natty | Not in release | |
| 10.10maverick | Not in release | |
| 10.04 LTSlucid | Not affected | |
| 8.04 LTShardy | Not in release | |
| linux-mvl-dove | 11.10oneiric | Not in release |
| 11.04natty | Not in release | |
| 10.10maverick | Fixed2.6.32-419.37 | |
| 10.04 LTSlucid | Fixed2.6.32-219.37 | |
| 8.04 LTShardy | Not in release | |
| linux-ti-omap4 | 11.10oneiric | Not affected |
| 11.04natty | Fixed2.6.38-1209.15 | |
| 10.10maverick | Fixed2.6.35-903.23 | |
| 10.04 LTSlucid | Not in release | |
| 8.04 LTShardy | Not in release |
Notes
Patch details
For informational purposes only. We recommend not to cherry-pick updates.How can I get the fixes?
| Package | Patch details |
|---|---|
| linux |
References
Related Ubuntu Security Notices (USN)
- USN-1219-1
- Linux kernel (Maverick backport) vulnerabilities
- 29 September 2011
- USN-1253-1
- Linux kernel vulnerabilities
- 8 November 2011
- USN-1211-1
- Linux kernel vulnerabilities
- 21 September 2011
- USN-1202-1
- Linux kernel (OMAP4) vulnerabilities
- 13 September 2011
- USN-1239-1
- Linux kernel (EC2) vulnerabilities
- 25 October 2011
- USN-1188-1
- eCryptfs vulnerabilities
- 9 August 2011
- USN-1227-1
- Linux kernel vulnerabilities
- 11 October 2011
- USN-1240-1
- Linux kernel (Marvell DOVE) vulnerabilities
- 25 October 2011
- USN-1204-1
- Linux kernel (i.MX51) vulnerabilities
- 13 September 2011
- USN-1256-1
- Linux kernel (Natty backport) vulnerabilities
- 9 November 2011
- USN-1245-1
- Linux kernel (Marvell DOVE) vulnerabilities
- 25 October 2011
- USN-1212-1
- Linux kernel (OMAP4) vulnerabilities
- 21 September 2011