Red Hat Security AdvisoryRHSA-2009:1671
kernel security and bug fix update
Released 2009-12-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 kernel-2.6.9-89.0.18.EL, kernel-2.6.9-89.0.18.EL.ia64, kernel-2.6.9-89.0.18.EL.ppc64iseries +14
- Red Hat Enterprise Linux Desktop version 4 kernel-2.6.9-89.0.18.EL, kernel-devel-2.6.9-89.0.18.EL, kernel-doc-2.6.9-89.0.18.EL +8
- Red Hat Enterprise Linux ES version 4 kernel-2.6.9-89.0.18.EL, kernel-2.6.9-89.0.18.EL.ia64, kernel-devel-2.6.9-89.0.18.EL +12
- Red Hat Enterprise Linux WS version 4 kernel-2.6.9-89.0.18.EL, kernel-2.6.9-89.0.18.EL.ia64, kernel-devel-2.6.9-89.0.18.EL +12
Fixes 4 records
Priority MEDIUM 48
The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote attackers to cause a denial of service (IOMMU space exhaustion and system crash) by using jumbo fram…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.12461 · Published 2009-10-19 · Fixed CWE-399
Priority LOW 34
The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command Engine (CCE) state initialization, which allows local users to cause a denial of service (NULL pointe…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00425 · Published 2009-10-22 · Fixed CWE-476
Priority LOW 27
net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on thi…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00987 · Published 2009-10-22 · Fixed CWE-400
Priority LOW 11
arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel registers before a return to user mode, which allows local users to read register values from an earlier…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00414 · Published 2009-10-20 · Fixed CWE-200
THREATIST.IORead the docs