Red Hat Security Advisory

RHSA-2012:0350

kernel security and bug fix update

Released 2012-03-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-220.7.1.el6, kernel-debug-2.6.32-220.7.1.el6, kernel-debug-devel-2.6.32-220.7.1.el6 +5
Red Hat Enterprise Linux Desktop Optional (v. 6) kernel-2.6.32-220.7.1.el6, python-perf-2.6.32-220.7.1.el6
Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-220.7.1.el6, kernel-debug-2.6.32-220.7.1.el6, kernel-debug-devel-2.6.32-220.7.1.el6 +5
Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel-2.6.32-220.7.1.el6, python-perf-2.6.32-220.7.1.el6
Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-220.7.1.el6, kernel-bootwrapper-2.6.32-220.7.1.el6, kernel-debug-2.6.32-220.7.1.el6 +8
Red Hat Enterprise Linux Server Optional (v. 6) kernel-2.6.32-220.7.1.el6, python-perf-2.6.32-220.7.1.el6
Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-220.7.1.el6, kernel-debug-2.6.32-220.7.1.el6, kernel-debug-devel-2.6.32-220.7.1.el6 +5
Red Hat Enterprise Linux Workstation Optional (v. 6) kernel-2.6.32-220.7.1.el6, python-perf-2.6.32-220.7.1.el6

Fixes 10 records

TI-2012-00200 CVE-2012-0207 · GHSA-6q5h-q7w3-mf7c

The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows…

MEDIUM 52

The igmp_heard_query function in net/ipv4/igmp.c in the Linux kernel before 3.2.1 allows remote attackers to cause a denial of service (divide-by-zero error and panic) via IGMP packets.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.20276 Published 2012-05-17 Fixed CWE-369

TI-2011-03596 CVE-2011-4077 · GHSA-wr72-x72c-p32w

Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux…

LOW 31

Buffer overflow in the xfs_readlink function in fs/xfs/xfs_vnodeops.c in XFS in the Linux kernel 2.6, when CONFIG_XFS_DEBUG is disabled, allows local users to cause a denial of service (memory corruption and crash) and p…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00534 Published 2012-01-27 Fixed CWE-119

TI-2012-00037 CVE-2012-0038 · GHSA-93m9-4rpc-rjmv

Integer overflow in the xfs_acl_from_disk function in fs/xfs/xfs_acl.c in the Linux…

LOW 25

Integer overflow in the xfs_acl_from_disk function in fs/xfs/xfs_acl.c in the Linux kernel before 3.1.9 allows local users to cause a denial of service (panic) via a filesystem with a malformed ACL, leading to a heap-bas…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00403 Published 2012-05-17 Fixed CWE-190

TI-2011-03960 CVE-2011-4594 · GHSA-pfqw-h6qm-mp6m

The __sys_sendmsg function in net/socket.c in the Linux kernel before 3.1 allows local…

LOW 25

The __sys_sendmsg function in net/socket.c in the Linux kernel before 3.1 allows local users to cause a denial of service (system crash) via crafted use of the sendmmsg system call, leading to an incorrect pointer derefe…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00429 Published 2012-05-17 Fixed CWE-476

TI-2011-03600 CVE-2011-4081 · GHSA-v6mx-fmfw-p682

crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a…

LOW 25

crypto/ghash-generic.c in the Linux kernel before 3.1 allows local users to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact by triggering a failed or missing ghash_…

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00452 Published 2012-05-24 Fixed CWE-476

TI-2012-00044 CVE-2012-0045 · GHSA-jq5h-388q-3jvj

The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux…

LOW 24

The em_syscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 (aka syscall) opcode, which allows guest OS users to cause a denial of servi…

CVSS 2.0MEDIUM 4.7 Local No auth Interaction — EPSS 0.01014 Published 2012-07-03 Fixed

TI-2011-03977 CVE-2011-4611 · GHSA-pq7v-jc9m-8g8c

Integer overflow in the perf_event_interrupt function in arch/powerpc/kernel/perf_event.c…

LOW 23

Integer overflow in the perf_event_interrupt function in arch/powerpc/kernel/perf_event.c in the Linux kernel before 2.6.39 on powerpc platforms allows local users to cause a denial of service (unhandled performance moni…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00397 Published 2012-05-17 Fixed CWE-189

TI-2011-03988 CVE-2011-4622 · GHSA-gqh3-j9ff-5g88

The create_pit_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other…

LOW 22

The create_pit_timer function in arch/x86/kvm/i8254.c in KVM 83, and possibly other versions, does not properly handle when Programmable Interval Timer (PIT) interrupt requests (IRQs) when a virtual interrupt controller…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00347 Published 2012-01-27 Partial fix

TI-2011-03812 CVE-2011-4347 · GHSA-x4h8-vxmx-gj2j

The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem…

LOW 19

The kvm_vm_ioctl_assign_device function in virt/kvm/assigned-dev.c in the KVM subsystem in the Linux kernel before 3.1.10 does not verify permission to access PCI configuration space and BAR resources, which allows host…

CVSS 2.0MEDIUM 4.0 Local No auth Interaction — EPSS 0.00367 Published 2013-06-08 Partial fix CWE-264

TI-2011-03649 CVE-2011-4132 · GHSA-cwc2-grvm-9422

The cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in…

LOW 12

The cleanup_journal_tail function in the Journaling Block Device (JBD) functionality in the Linux kernel 2.6 allows local users to cause a denial of service (assertion error and kernel oops) via an ext3 or ext4 image wit…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00468 Published 2012-01-27 Partial fix CWE-20