Red Hat Security Advisory

RHSA-2008:1017

kernel security and bug fix update

Released 2008-12-16 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-92.1.22.el5, kernel-2.6.18-92.1.22.el5.ia64, kernel-PAE-2.6.18-92.1.22.el5 +18
Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-92.1.22.el5, kernel-PAE-2.6.18-92.1.22.el5, kernel-PAE-devel-2.6.18-92.1.22.el5 +8

Fixes 3 records

TI-2008-04361 CVE-2008-4576 · GHSA-q2qc-6fm5-5mwj

sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of…

MEDIUM 40

sctp in Linux kernel before 2.6.25.18 allows remote attackers to cause a denial of service (OOPS) via an INIT-ACK that states the peer does not support AUTH, which causes the sctp_process_init function to clean up active…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.0368 Published 2008-10-15 Fixed CWE-287

TI-2008-03670 CVE-2008-3831 · GHSA-wm3c-vw32-xmgp

The i915 driver in (1) drivers/char/drm/i915_dma.c in the Linux kernel 2.6.24 on Debian…

LOW 22

The i915 driver in (1) drivers/char/drm/i915_dma.c in the Linux kernel 2.6.24 on Debian GNU/Linux and (2) sys/dev/pci/drm/i915_drv.c in OpenBSD does not restrict the DRM_I915_HWS_ADDR ioctl to the Direct Rendering Manage…

CVSS 2.0MEDIUM 4.7 Local No auth Interaction — EPSS 0.00511 Published 2008-10-20 Fixed CWE-399

TI-2008-04344 CVE-2008-4554 · GHSA-qh85-78gq-v523

The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not…

LOW 21

The do_splice_from function in fs/splice.c in the Linux kernel before 2.6.27 does not reject file descriptors that have the O_APPEND flag set, which allows local users to bypass append mode and make arbitrary changes to…

CVSS 2.0MEDIUM 4.6 Local No auth Interaction — EPSS 0.00392 Published 2008-10-15 Fixed CWE-264