[Bug 971685] Re: CVE-2012-1601

The Precise Pangolin has reached end of life, so this bug will not be fixed for that release ** Changed in: linux-lts-saucy (Ubuntu Precise) Status: New => Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 971685] Re: CVE-2012-1601

** Changed in: linux-lts-backport-maverick (Ubuntu Utopic) Status: New => Won't Fix ** Changed in: linux-lts-backport-natty (Ubuntu Utopic) Status: New => Won't Fix ** Changed in: linux-lts-backport-oneiric (Ubuntu Utopic) Status: New => Won't Fix -- You received this bug

[Bug 971685] Re: CVE-2012-1601

** Changed in: linux-lts-xenial (Ubuntu Precise) Status: New => Invalid ** Changed in: linux-lts-xenial (Ubuntu Precise) Importance: Undecided => Medium ** Changed in: linux-lts-xenial (Ubuntu Wily) Status: New => Invalid ** Changed in: linux-lts-xenial (Ubuntu Wily)

[Bug 971685] Re: CVE-2012-1601

** No longer affects: linux-lts-trusty (Ubuntu Utopic) ** No longer affects: linux-armadaxp (Ubuntu Utopic) ** No longer affects: linux-ec2 (Ubuntu Utopic) ** No longer affects: linux-lts-wily (Ubuntu Utopic) ** No longer affects: linux-goldfish (Ubuntu Utopic) ** No longer affects:

[Bug 971685] Re: CVE-2012-1601

** Also affects: linux (Ubuntu Xenial) Importance: Medium Assignee: Brad Figg (brad-figg) Status: Invalid ** Also affects: linux-fsl-imx51 (Ubuntu Xenial) Importance: Medium Status: Invalid ** Also affects: linux-mvl-dove (Ubuntu Xenial) Importance: Medium

[Bug 971685] Re: CVE-2012-1601

** Also affects: linux (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: linux-fsl-imx51 (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: linux-mvl-dove (Ubuntu Trusty) Importance: Undecided Status: New ** Also affects: linux-ec2

[Bug 971685] Re: CVE-2012-1601

** No longer affects: linux-armadaxp (Ubuntu Hardy) ** No longer affects: linux-armadaxp (Ubuntu Oneiric) ** No longer affects: linux-ec2 (Ubuntu Hardy) ** No longer affects: linux-ec2 (Ubuntu Oneiric) ** No longer affects: linux-lts-backport-oneiric (Ubuntu Hardy) ** No longer affects:

[Bug 971685] Re: CVE-2012-1601

** Changed in: linux-lts-raring (Ubuntu Precise) Status: New = Invalid ** Changed in: linux-lts-raring (Ubuntu Precise) Importance: Undecided = Medium ** Changed in: linux-lts-raring (Ubuntu Oneiric) Status: New = Invalid ** Changed in: linux-lts-raring (Ubuntu Oneiric)

[Bug 971685] Re: CVE-2012-1601

** Also affects: linux (Ubuntu Saucy) Importance: Medium Assignee: Brad Figg (brad-figg) Status: Invalid ** Also affects: linux-fsl-imx51 (Ubuntu Saucy) Importance: Medium Status: Invalid ** Also affects: linux-mvl-dove (Ubuntu Saucy) Importance: Medium Status:

[Bug 971685] Re: CVE-2012-1601

** Changed in: linux-armadaxp (Ubuntu Raring) Status: Fix Released = Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/971685 Title: CVE-2012-1601 To manage notifications about this bug

[Bug 971685] Re: CVE-2012-1601

** Branch linked: lp:ubuntu/precise-proposed/linux-lowlatency -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/971685 Title: CVE-2012-1601 To manage notifications about this bug go to:

[Bug 971685] Re: CVE-2012-1601

** No longer affects: linux-armadaxp (Ubuntu Maverick) ** No longer affects: linux-armadaxp (Ubuntu Natty) ** No longer affects: linux-ec2 (Ubuntu Maverick) ** No longer affects: linux-ec2 (Ubuntu Natty) ** No longer affects: linux-lts-backport-oneiric (Ubuntu Maverick) ** No longer affects:

[Bug 971685] Re: CVE-2012-1601

** Also affects: linux (Ubuntu Raring) Importance: Medium Assignee: Brad Figg (brad-figg) Status: Invalid ** Also affects: linux-fsl-imx51 (Ubuntu Raring) Importance: Medium Status: Invalid ** Also affects: linux-mvl-dove (Ubuntu Raring) Importance: Medium

[Bug 971685] Re: CVE-2012-1601

** Changed in: linux-lts-quantal (Ubuntu Maverick) Status: New = Invalid ** Changed in: linux-lts-quantal (Ubuntu Natty) Status: New = Invalid ** Changed in: linux-lts-quantal (Ubuntu Precise) Status: New = Invalid ** Changed in: linux-lts-quantal (Ubuntu Precise)

[Bug 971685] Re: CVE-2012-1601

** Changed in: linux-ti-omap4 (Ubuntu Natty) Status: New = Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/971685 Title: CVE-2012-1601 To manage notifications about this bug go to:

[Bug 971685] Re: CVE-2012-1601

This bug was fixed in the package linux-armadaxp - 3.2.0-1605.8 --- linux-armadaxp (3.2.0-1605.8) precise-proposed; urgency=low * Release Tracking Bug -LP: #1020888 [ Jani Monoses ] * Fix warnings. * Adapt to new sched_clock API [ Ubuntu: 3.2.0-27.43 ] * No change

[Bug 971685] Re: CVE-2012-1601

This bug was fixed in the package linux - 2.6.24-32.104 --- linux (2.6.24-32.104) hardy-proposed; urgency=low [Luis Henriques] * Release Tracking Bug - LP: #1023810 [Upstream Kernel Changes] * netfilter: nf_conntrack_reasm: properly handle packets fragmented into a

[Bug 971685] Re: CVE-2012-1601

We revisited the issue on hardy, and were able to reproduce the issue and validate the fix. ** Changed in: linux (Ubuntu Hardy) Status: Won't Fix = Fix Committed ** Changed in: linux (Ubuntu Hardy) Assignee: Brad Figg (brad-figg) = Herton R. Krzesinski (herton) -- You received this

[Bug 971685] Re: CVE-2012-1601

This bug was fixed in the package linux-armadaxp - 3.2.0-1603.6 --- linux-armadaxp (3.2.0-1603.6) precise-proposed; urgency=low [ Jani Monoses ] * SAUCE: Add CONFIG_SHEEVA_ERRATA_ARM_CPU_6409 - LP: #1006217 [ Ubuntu: 3.2.0-24.39 ] * Release Tracking Bug - LP:

[Bug 971685] Re: CVE-2012-1601

This bug was fixed in the package linux-lts-backport-natty - 2.6.38-15.60~lucid1 --- linux-lts-backport-natty (2.6.38-15.60~lucid1) lucid-proposed; urgency=low [Luis Henriques] * Release Tracking Bug - LP: #1003079 [ Andy Whitcroft ] * [Config] control.stub is an

[Bug 971685] Re: CVE-2012-1601

** Branch linked: lp:ubuntu/precise-proposed/linux-armadaxp -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/971685 Title: CVE-2012-1601 To manage notifications about this bug go to:

[Bug 971685] Re: CVE-2012-1601

This bug was fixed in the package linux - 2.6.38-15.60 --- linux (2.6.38-15.60) natty-proposed; urgency=low [Luis Henriques] * Release Tracking Bug - LP: #1002384 [ Andy Whitcroft ] * [Config] control.stub is an intermediate product not a dependancy - LP: #992414

[Bug 971685] Re: CVE-2012-1601

This bug was fixed in the package linux-ti-omap4 - 3.2.0-1413.17 --- linux-ti-omap4 (3.2.0-1413.17) precise-proposed; urgency=low * Release Tracking Bug - LP: #992917 [ Paolo Pisati ] * rebased on 3.2.0-24.38 [ Ubuntu: 3.2.0-24.38 ] * Release Tracking Bug - LP:

[Bug 971685] Re: CVE-2012-1601

This bug was fixed in the package linux-ti-omap4 - 3.0.0-1210.22 --- linux-ti-omap4 (3.0.0-1210.22) oneiric-proposed; urgency=low * Release Tracking Bug - LP: #993169 [ Paolo Pisati ] * rebased on 3.0.0-20.34 [ Ubuntu: 3.0.0-20.34 ] * Release Tracking Bug - LP:

[Bug 971685] Re: CVE-2012-1601

This bug was fixed in the package linux-lts-backport-oneiric - 3.0.0-20.34~lucid1 --- linux-lts-backport-oneiric (3.0.0-20.34~lucid1) lucid-proposed; urgency=low [Luis Henriques] * Release Tracking Bug - LP: #993170 [ Herton Ronaldo Krzesinski ] * linux: add

[Bug 971685] Re: CVE-2012-1601

** Branch linked: lp:ubuntu/lucid-updates/linux-lts-backport-oneiric -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/971685 Title: CVE-2012-1601 To manage notifications about this bug go to:

[Bug 971685] Re: CVE-2012-1601

This bug was fixed in the package linux-ec2 - 2.6.32-345.48 --- linux-ec2 (2.6.32-345.48) lucid-proposed; urgency=low [ Stefan Bader ] * Rebased to Ubuntu-2.6.32-41.89 * Release Tracking Bug - LP: #991770 [ Ubuntu: 2.6.32-41.89 ] * SAUCE: (no-up) remove __initdata

[Bug 971685] Re: CVE-2012-1601

This bug was fixed in the package linux - 3.0.0-20.34 --- linux (3.0.0-20.34) oneiric-proposed; urgency=low [Luis Henriques] * Release Tracking Bug - LP: #992497 [ Herton Ronaldo Krzesinski ] * linux: add Build-Depends for libnewt-dev, to enable perf TUI support -

[Bug 971685] Re: CVE-2012-1601

** Branch linked: lp:ubuntu/lucid-proposed/linux-lts-backport-natty -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/971685 Title: CVE-2012-1601 To manage notifications about this bug go to:

[Bug 971685] Re: CVE-2012-1601

commit 3e515705a1f46beb1c942bb8043c16f8ac7b1e9e was part of the 3.4 and quantal has never been affected by this CVE ** Changed in: linux (Ubuntu Quantal) Status: In Progress = Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to

[Bug 971685] Re: CVE-2012-1601

** Description changed: - If some vcpus are created before KVM_CREATE_IRQCHIP, then - irqchip_in_kernel() and vcpu-arch.apic will be inconsistent, leading to - potential NULL pointer dereferences. An unprivileged local user could - use this flaw to crash the system. + The KVM implementation in

[Bug 971685] Re: CVE-2012-1601

This bug was fixed in the package linux - 3.2.0-24.38 --- linux (3.2.0-24.38) precise-proposed; urgency=low [ Luis Henriques ] * Release Tracking Bug - LP: #991925 [ Herton Ronaldo Krzesinski ] * linux: add Build-Depends for libnewt-dev, to enable perf TUI support

[Bug 971685] Re: CVE-2012-1601

** Branch linked: lp:ubuntu/oneiric-proposed/linux-ti-omap4 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/971685 Title: CVE-2012-1601 To manage notifications about this bug go to:

[Bug 971685] Re: CVE-2012-1601

This bug was fixed in the package linux - 2.6.32-41.89 --- linux (2.6.32-41.89) lucid-proposed; urgency=low [Herton R. Krzesinski] * Release Tracking Bug - LP: #990103 [ Tim Gardner ] * SAUCE: (no-up) remove __initdata from vesafb_fix - LP: #969309 [ Upstream

[Bug 971685] Re: CVE-2012-1601

** Branch linked: lp:ubuntu/lucid-proposed/linux-ec2 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/971685 Title: CVE-2012-1601 To manage notifications about this bug go to:

[Bug 971685] Re: CVE-2012-1601

** Branch linked: lp:ubuntu/precise-proposed/linux-ti-omap4 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/971685 Title: CVE-2012-1601 To manage notifications about this bug go to:

[Bug 971685] Re: CVE-2012-1601

** Branch linked: lp:ubuntu/lucid-proposed/linux-lts-backport-oneiric -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/971685 Title: CVE-2012-1601 To manage notifications about this bug go to:

[Bug 971685] Re: CVE-2012-1601

** Also affects: linux (Ubuntu Quantal) Importance: Medium Assignee: Brad Figg (brad-figg) Status: In Progress ** Also affects: linux-armadaxp (Ubuntu Quantal) Importance: Undecided Status: New ** Also affects: linux-ec2 (Ubuntu Quantal) Importance: Medium

[Bug 971685] Re: CVE-2012-1601

** Changed in: linux-armadaxp (Ubuntu Quantal) Status: New = Fix Committed ** Changed in: linux-armadaxp (Ubuntu Quantal) Importance: Undecided = Medium ** Changed in: linux-ti-omap4 (Ubuntu Quantal) Status: New = Invalid -- You received this bug notification because you are a

[Bug 971685] Re: CVE-2012-1601

** Changed in: linux-armadaxp (Ubuntu Precise) Status: New = Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/971685 Title: CVE-2012-1601 To manage notifications about this bug

[Bug 971685] Re: CVE-2012-1601

** Changed in: linux-armadaxp (Ubuntu Precise) Importance: Undecided = Medium ** Changed in: linux-armadaxp (Ubuntu Oneiric) Status: New = Invalid ** Changed in: linux-armadaxp (Ubuntu Oneiric) Importance: Undecided = Medium ** Changed in: linux-armadaxp (Ubuntu Lucid)

[Bug 971685] Re: CVE-2012-1601

** Changed in: linux-armadaxp (Ubuntu Maverick) Status: New = Invalid -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/971685 Title: CVE-2012-1601 To manage notifications about this bug go to:

[Bug 971685] Re: CVE-2012-1601

Given the differences in the hardy kvm code we feel that it is just too risky to backport this patch without introducing regressions. We also feel that given the maturity of kvm at the time, there probably are very few kvm users on Hardy ** Changed in: linux (Ubuntu Hardy) Status: In

[Bug 971685] Re: CVE-2012-1601

** Changed in: linux (Ubuntu Hardy) Status: Invalid = Won't Fix -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/971685 Title: CVE-2012-1601 To manage notifications about this bug go to:

[Bug 971685] Re: CVE-2012-1601

** Changed in: linux-ec2 (Ubuntu Lucid) Status: New = Fix Committed ** Changed in: linux-lts-backport-oneiric (Ubuntu Lucid) Status: New = Fix Committed ** Changed in: linux-lts-backport-natty (Ubuntu Lucid) Status: New = Fix Committed ** Changed in: linux (Ubuntu Precise)

[Bug 971685] Re: CVE-2012-1601

** Changed in: linux (Ubuntu Oneiric) Status: New = In Progress ** Changed in: linux (Ubuntu Oneiric) Assignee: (unassigned) = Brad Figg (brad-figg) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 971685] Re: CVE-2012-1601

** Changed in: linux (Ubuntu Precise) Status: New = In Progress ** Changed in: linux (Ubuntu Precise) Assignee: (unassigned) = Brad Figg (brad-figg) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 971685] Re: CVE-2012-1601

** Changed in: linux (Ubuntu Natty) Status: New = In Progress ** Changed in: linux (Ubuntu Natty) Assignee: (unassigned) = Brad Figg (brad-figg) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 971685] Re: CVE-2012-1601

** Changed in: linux (Ubuntu Lucid) Status: New = In Progress ** Changed in: linux (Ubuntu Lucid) Assignee: (unassigned) = Brad Figg (brad-figg) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 971685] Re: CVE-2012-1601

** Changed in: linux (Ubuntu Hardy) Status: New = In Progress ** Changed in: linux (Ubuntu Hardy) Assignee: (unassigned) = Brad Figg (brad-figg) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 971685] Re: CVE-2012-1601

** Changed in: linux-mvl-dove (Ubuntu Maverick) Status: New = Invalid ** Changed in: linux (Ubuntu Maverick) Status: New = Invalid ** Changed in: linux-ti-omap4 (Ubuntu Maverick) Status: New = Invalid ** Changed in: linux-lts-backport-maverick (Ubuntu Lucid) Status:

[Bug 971685] Re: CVE-2012-1601

** Description changed: If some vcpus are created before KVM_CREATE_IRQCHIP, then irqchip_in_kernel() and vcpu-arch.apic will be inconsistent, leading to potential NULL pointer dereferences. An unprivileged local user could use this flaw to crash the system. - Break-Fix: -

[Bug 971685] Re: CVE-2012-1601

CVE-2012-1601 ** Also affects: linux (Ubuntu Precise) Importance: Undecided Status: New ** Also affects: linux-ec2 (Ubuntu Precise) Importance: Undecided Status: New ** Also affects: linux-fsl-imx51 (Ubuntu Precise) Importance: Undecided Status: New ** Also