Red Hat Security AdvisoryRHSA-2009:0053
kernel-rt security and bug fix update
Released 2009-02-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- MRG Realtime for RHEL 5 Server kernel-rt-2.6.24.7-101.el5rt, kernel-rt-debug-2.6.24.7-101.el5rt, kernel-rt-debug-devel-2.6.24.7-101.el5rt +6
Fixes 6 records
Priority MEDIUM 60
Buffer overflow in net/sctp/sm_statefuns.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.28-git8 allows remote attackers to have an unknown impact via an FWD-TSN (aka FO…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.1673 · Published 2009-01-07 · Fixed CWE-119
Priority MEDIUM 51
Buffer overflow in the lbs_process_bss function in drivers/net/wireless/libertas/scan.c in the libertas subsystem in the Linux kernel before 2.6.27.5 allows remote attackers to have an unknown impact via an "invalid beac…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05362 · Published 2008-11-18 · Fixed CWE-119
Priority LOW 30
The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount.
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.0027 · Published 2008-11-21 · Fixed CWE-362
Priority LOW 25
net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite loop) by making two calls to svc_listen for the same socket, and then reading a…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.01094 · Published 2008-12-09 · Fixed CWE-399
Priority LOW 23
Linux kernel 2.6.28 allows local users to cause a denial of service ("soft lockup" and process loss) via a large number of sendmsg function calls, which does not block during AF_UNIX garbage collection and triggers an OO…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00405 · Published 2008-12-01 · Fixed CWE-399
Priority LOW 11
libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users to cause a denial of service (Programmed I/O mode on drives) via multiple simultaneous invocations of…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.0037 · Published 2008-12-22 · Fixed CWE-399