Red Hat Security AdvisoryRHSA-2008:0233
kernel security and bug fix update
Released 2008-05-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-53.1.19.el5, kernel-2.6.18-53.1.19.el5.ia64, kernel-PAE-2.6.18-53.1.19.el5 +18
- Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-53.1.19.el5, kernel-PAE-2.6.18-53.1.19.el5, kernel-PAE-devel-2.6.18-53.1.19.el5 +8
Fixes 6 records
Priority LOW 38
gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i386, which can prevent the direction flag (DF) from being reset in violation of…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02791 · Published 2008-03-17 · Fixed CWE-399
Priority LOW 32
Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local users to access kernel memory via an out-of-range offset.
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00494 · Published 2008-02-08 · Fixed CWE-399
Priority LOW 31
Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain "re-ordered access to…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00411 · Published 2008-05-08 · Fixed CWE-362
Priority LOW 30
Race condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6.24.6, and 2.6.25 before 2.6.25.1, allows local users to cause a denial of service (OOPS) and possibly gain privileges via…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00306 · Published 2008-05-02 · Fixed CWE-362
Priority LOW 23
The ssm_i emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service (dom0 panic) via certain traffic, as demonstrated using an FTP stress test tool.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01322 · Published 2008-04-02 · Fixed
Priority LOW 22
The Xen hypervisor block backend driver for Linux kernel 2.6.18, when running on a 64-bit host with a 32-bit paravirtualized guest, allows local privileged users in the guest OS to cause a denial of service (host OS cras…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00342 · Published 2008-05-08 · Fixed CWE-399