Red Hat Security AdvisoryRHSA-2010:0394
kernel security, bug fix, and enhancement update
Released 2010-05-05 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 kernel-2.6.9-89.0.25.EL, kernel-2.6.9-89.0.25.EL.ia64, kernel-2.6.9-89.0.25.EL.ppc64iseries +14
- Red Hat Enterprise Linux Desktop version 4 kernel-2.6.9-89.0.25.EL, kernel-devel-2.6.9-89.0.25.EL, kernel-doc-2.6.9-89.0.25.EL +8
- Red Hat Enterprise Linux ES version 4 kernel-2.6.9-89.0.25.EL, kernel-2.6.9-89.0.25.EL.ia64, kernel-devel-2.6.9-89.0.25.EL +12
- Red Hat Enterprise Linux WS version 4 kernel-2.6.9-89.0.25.EL, kernel-2.6.9-89.0.25.EL.ia64, kernel-devel-2.6.9-89.0.25.EL +12
Fixes 5 records
Priority MEDIUM 40
The ULE decapsulation functionality in drivers/media/dvb/dvb-core/dvb_net.c in dvb-core in Linux kernel 2.6.33 and earlier allows attackers to cause a denial of service (infinite loop) via a crafted MPEG2-TS frame, relat…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03603 · Published 2010-04-06 · Fixed CWE-399
Priority LOW 37
Use-after-free vulnerability in net/ipv4/tcp_input.c in the Linux kernel 2.6 before 2.6.20, when IPV6_RECVPKTINFO is set on a listening socket, allows remote attackers to cause a denial of service (kernel panic) via a SY…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.03295 · Published 2010-03-31 · Fixed CWE-399
Priority LOW 37
The azx_position_ok function in hda_intel.c in Linux kernel 2.6.33-rc4 and earlier, when running on the AMD780V chip set, allows context-dependent attackers to cause a denial of service (crash) via unknown manipulations…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.02917 · Published 2010-04-06 · Fixed CWE-189
Priority LOW 30
A certain Red Hat patch for the Linux kernel in Red Hat Enterprise Linux (RHEL) 4 on the ia64 platform allows local users to use ptrace on an arbitrary process, and consequently gain privileges, via vectors related to a…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00338 · Published 2010-03-16 · Fixed CWE-264
Priority LOW 22
The processcompl_compat function in drivers/usb/core/devio.c in Linux kernel 2.6.x through 2.6.32, and possibly other versions, does not clear the transfer buffer before returning to userspace when a USB command fails, w…
CVSS 2.0MEDIUM 4.7· Local · No auth · Interaction — · EPSS 0.00361 · Published 2010-04-06 · Fixed CWE-399