Red Hat Security AdvisoryRHSA-2009:0473
kernel security and bug fix update
Released 2009-05-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-128.1.10.el5, kernel-2.6.18-128.1.10.el5.ia64, kernel-PAE-2.6.18-128.1.10.el5 +18
- Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-128.1.10.el5, kernel-PAE-2.6.18-128.1.10.el5, kernel-PAE-devel-2.6.18-128.1.10.el5 +8
Fixes 5 records
Priority LOW 23
The exit_notify function in kernel/exit.c in the Linux kernel before 2.6.30-rc1 does not restrict exit signals when the CAP_KILL capability is held, which allows local users to send an arbitrary signal to a process by ru…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.01255 · Published 2009-04-22 · Fixed CWE-264
Priority LOW 23
fs/nfs/client.c in the Linux kernel before 2.6.23 does not properly initialize a certain structure member that stores the maximum NFS filename length, which allows local users to cause a denial of service (OOPS) via a lo…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00411 · Published 2009-04-22 · Fixed CWE-20
Priority LOW 23
The ecryptfs_write_metadata_to_contents function in the eCryptfs functionality in the Linux kernel 2.6.28 before 2.6.28.9 uses an incorrect size when writing kernel memory to an eCryptfs file header, which triggers an ou…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00389 · Published 2009-03-25 · Fixed CWE-189
Priority LOW 19
Race condition in the do_setlk function in fs/nfs/file.c in the Linux kernel before 2.6.26 allows local users to cause a denial of service (crash) via vectors resulting in an interrupted RPC call that leads to a stray FL…
CVSS 2.0MEDIUM 4.0· Local · No auth · Interaction — · EPSS 0.00284 · Published 2009-01-13 · Fixed CWE-362
Priority LOW 18
The audit_syscall_entry function in the Linux kernel 2.6.28.7 and earlier on the x86_64 platform does not properly handle (1) a 32-bit process making a 64-bit syscall or (2) a 64-bit process making a 32-bit syscall, whic…
CVSS 2.0LOW 3.6· Local · No auth · Interaction — · EPSS 0.00441 · Published 2009-03-06 · Fixed