Red Hat Security AdvisoryRHSA-2010:0161
kernel-rt security and bug fix update
Released 2010-03-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- MRG Realtime for RHEL 5 Server kernel-rt-2.6.24.7-149.el5rt, kernel-rt-debug-2.6.24.7-149.el5rt, kernel-rt-debug-devel-2.6.24.7-149.el5rt +6
Fixes 9 records
Priority MEDIUM 48
The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which al…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.12327 · Published 2010-03-24 · Fixed
Priority LOW 34
Use-after-free vulnerability in the fasync_helper function in fs/fcntl.c in the Linux kernel before 2.6.33-rc4-git1 allows local users to gain privileges via vectors that include enabling O_ASYNC (aka FASYNC or FIOASYNC)…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00971 · Published 2010-01-19 · Fixed CWE-399
Priority LOW 25
The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service (OOPS), and po…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.01804 · Published 2010-02-17 · Fixed
Priority LOW 25
The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations…
CVSS 2.0MEDIUM 5.4· Local · No auth · Interaction — · EPSS 0.00415 · Published 2010-01-26 · Fixed CWE-200
Priority LOW 23
drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and system crash) by sending the kernel many NETLINK_CONNECTOR messages.
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00444 · Published 2010-02-21 · Fixed CWE-399
Priority LOW 22
The Linux kernel before 2.6.32.4 allows local users to gain privileges or cause a denial of service (panic) by calling the (1) mmap or (2) mremap function, aka the "do_mremap() mess" or "mremap/mmap mess."
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.0043 · Published 2010-02-15 · Fixed CWE-264
Priority LOW 21
Race condition in the tty_fasync function in drivers/char/tty_io.c in the Linux kernel before 2.6.32.6 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecif…
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00263 · Published 2010-09-08 · Fixed CWE-362
Priority LOW 11
The wake_futex_pi function in kernel/futex.c in the Linux kernel before 2.6.33-rc7 does not properly handle certain unlock operations for a Priority Inheritance (PI) futex, which allows local users to cause a denial of s…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00384 · Published 2010-02-15 · Fixed
Priority LOW 11
net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the CAP_NET_ADMIN capability for setting or modifying rules, which allows local use…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.004 · Published 2010-01-19 · Fixed CWE-264