Red Hat Security AdvisoryRHSA-2009:1132
kernel security and bug fix update
Released 2009-06-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 kernel-2.6.9-89.0.3.EL, kernel-2.6.9-89.0.3.EL.ia64, kernel-2.6.9-89.0.3.EL.ppc64iseries +14
- Red Hat Enterprise Linux Desktop version 4 kernel-2.6.9-89.0.3.EL, kernel-devel-2.6.9-89.0.3.EL, kernel-doc-2.6.9-89.0.3.EL +8
- Red Hat Enterprise Linux ES version 4 kernel-2.6.9-89.0.3.EL, kernel-2.6.9-89.0.3.EL.ia64, kernel-devel-2.6.9-89.0.3.EL +12
- Red Hat Enterprise Linux WS version 4 kernel-2.6.9-89.0.3.EL, kernel-2.6.9-89.0.3.EL.ia64, kernel-devel-2.6.9-89.0.3.EL +12
Fixes 5 records
Priority MEDIUM 59
Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet (aka e1000…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.33727 · Published 2009-06-04 · Fixed CWE-189
Priority LOW 27
The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and probably other versions allows guest user applications to cause a denial of service (kernel oops) of…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02158 · Published 2009-05-22 · Fixed CWE-399
Priority LOW 23
The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsystem in the Linux kernel before 2.6.30-rc3 do not zero out pages that may later be available to a use…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00392 · Published 2009-04-24 · Fixed
Priority LOW 23
nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thread, which allows local users to create device nodes, as demonstrated on a filesystem that has been e…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00427 · Published 2009-03-25 · Fixed CWE-16
Priority LOW 21
The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, when atomic_open is available, does not check execute (aka EXEC or MAY_EXEC) permission bits, which a…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00485 · Published 2009-05-14 · Fixed CWE-264