Red Hat Security AdvisoryRHSA-2009:1193
kernel security and bug fix update
Released 2009-08-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-128.4.1.el5, kernel-2.6.18-128.4.1.el5.ia64, kernel-PAE-2.6.18-128.4.1.el5 +18
- Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-128.4.1.el5, kernel-PAE-2.6.18-128.4.1.el5, kernel-PAE-devel-2.6.18-128.4.1.el5 +8
- Red Hat Enterprise Linux EUS (v. 5.3 server) kernel-2.6.18-128.4.1.el5, kernel-2.6.18-128.4.1.el5.ia64, kernel-PAE-2.6.18-128.4.1.el5 +18
Fixes 7 records
Priority MEDIUM 59
Integer underflow in the e1000_clean_rx_irq function in drivers/net/e1000/e1000_main.c in the e1000 driver in the Linux kernel before 2.6.30-rc8, the e1000e driver in the Linux kernel, and Intel Wired Ethernet (aka e1000…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.33727 · Published 2009-06-04 · Fixed CWE-189
Priority MEDIUM 42
Buffer overflow in the RTL8169 NIC driver (drivers/net/r8169.c) in the Linux kernel before 2.6.30 allows remote attackers to cause a denial of service (kernel memory corruption and crash) via a long packet.
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.05471 · Published 2009-06-16 · Fixed CWE-119
Priority LOW 32
The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting that does not clear the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags when executing a setuid or setgid program, which makes…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00439 · Published 2009-07-16 · Fixed CWE-16
Priority LOW 32
Integer overflow in the hrtimer_start function in kernel/hrtimer.c in the Linux kernel before 2.6.23.10 allows local users to execute arbitrary code or cause a denial of service (panic) via a large relative timeout value…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00478 · Published 2007-12-20 · Fixed CWE-189
Priority LOW 31
Heap-based buffer overflow in the parse_tag_3_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or poss…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00594 · Published 2009-07-31 · Fixed CWE-119
Priority LOW 31
Stack-based buffer overflow in the parse_tag_11_packet function in fs/ecryptfs/keystore.c in the eCryptfs subsystem in the Linux kernel before 2.6.30.4 allows local users to cause a denial of service (system crash) or po…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00498 · Published 2009-07-31 · Fixed CWE-119
Priority LOW 25
The ptrace_start function in kernel/ptrace.c in the Linux kernel 2.6.18 does not properly handle simultaneous execution of the do_coredump function, which allows local users to cause a denial of service (deadlock) via ve…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00364 · Published 2009-07-05 · Fixed CWE-667