Red Hat Security AdvisoryRHSA-2007:0940
kernel security update
Released 2007-10-22 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-8.1.15.el5, kernel-2.6.18-8.1.15.el5.ia64, kernel-PAE-2.6.18-8.1.15.el5 +10
- Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-8.1.15.el5, kernel-PAE-2.6.18-8.1.15.el5, kernel-PAE-devel-2.6.18-8.1.15.el5 +4
Fixes 9 records
Priority LOW 29
The Distributed Lock Manager (DLM) in the cluster manager for Linux kernel 2.6.15 allows remote attackers to cause a denial of service (loss of lock services) by connecting to the DLM port, which probably prevents other…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03454 · Published 2007-07-20 · Fixed CWE-16
Priority LOW 23
The Linux kernel 2.6.20 and 2.6.21 does not properly handle an invalid LDT segment selector in %cs (the xcs field) during ptrace single-step operations, which allows local users to cause a denial of service (NULL derefer…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00512 · Published 2007-09-17 · Fixed CWE-20
Priority LOW 23
The lcd_write function in drivers/usb/misc/usblcd.c in the Linux kernel before 2.6.22-rc7 does not limit the amount of memory used by a caller, which allows local users to cause a denial of service (memory consumption).
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00406 · Published 2007-07-03 · Fixed
Priority LOW 22
Unspecified vulnerability in the "stack unwinder fixes" in kernel in Red Hat Enterprise Linux 5, when running on AMD64 and Intel 64, allows local users to cause a denial of service via unknown vectors.
CVSS 2.0MEDIUM 4.7· Local · No auth · Interaction — · EPSS 0.00363 · Published 2007-10-23 · Fixed
Priority LOW 22
The (1) hugetlb_vmtruncate_list and (2) hugetlb_vmtruncate functions in fs/hugetlbfs/inode.c in the Linux kernel before 2.6.19-rc4 perform certain prio_tree calculations using HPAGE_SIZE instead of PAGE_SIZE units, which…
CVSS 2.0MEDIUM 4.7· Local · No auth · Interaction — · EPSS 0.00375 · Published 2007-10-04 · Fixed
Priority LOW 22
Stack-based buffer overflow in the random number generator (RNG) implementation in the Linux kernel before 2.6.22 might allow local root users to cause a denial of service or gain privileges by setting the default wakeup…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00454 · Published 2007-07-27 · Fixed CWE-119
Priority LOW 11
The (1) aac_cfg_open and (2) aac_compat_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial o…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.00366 · Published 2007-08-13 · Fixed
Priority LOW 10
The eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does not properly map userspace resources, which allows local users to read portions of physical address space.
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.0034 · Published 2007-10-23 · Fixed CWE-200
Priority LOW 10
Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges by causing a setuid-root parent process to die, which delivers an attacker-contr…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.00363 · Published 2007-08-14 · Fixed