Red Hat Security Advisory

RHSA-2007:0169

kernel security and bug fix update

Released 2007-04-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-8.1.3.el5, kernel-2.6.18-8.1.3.el5.ia64, kernel-PAE-2.6.18-8.1.3.el5 +14
Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-8.1.3.el5, kernel-PAE-2.6.18-8.1.3.el5, kernel-PAE-devel-2.6.18-8.1.3.el5 +6

Fixes 3 records

TI-2007-00968 CVE-2007-1000 · GHSA-wq3f-4x5w-22pp

The ipv6_getsockopt_sticky function in net/ipv6/ipv6_sockglue.c in the Linux kernel…

LOW 34

The ipv6_getsockopt_sticky function in net/ipv6/ipv6_sockglue.c in the Linux kernel before 2.6.20.2 allows local users to read arbitrary kernel memory via certain getsockopt calls that trigger a NULL dereference.

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.01135 Published 2007-03-12 Fixed

TI-2007-00752 CVE-2007-0771 · GHSA-64w9-gfhc-7qwj

The utrace support in Linux kernel 2.6.18, and other versions, allows local users to…

LOW 23

The utrace support in Linux kernel 2.6.18, and other versions, allows local users to cause a denial of service (system hang) related to "MT exec + utrace_attach spin failure mode," as demonstrated by ptrace-thrash.c.

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.0038 Published 2007-05-02 Fixed

TI-2007-01330 CVE-2007-1388 · GHSA-c6w9-v295-wr3x

The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before…

LOW 21

The do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and possibly other versions, allows local users to cause a denial of service (oops) by calling setsockopt with the IPV6_RTHDR opt…

CVSS 2.0MEDIUM 4.4 Local Low privileges Interaction — EPSS 0.00568 Published 2007-03-10 Fixed CWE-399