Red Hat Security AdvisoryRHSA-2012:0358
kernel security and bug fix update
Released 2012-03-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux EUS (v. 5.6 server) kernel-2.6.18-238.35.1.el5, kernel-2.6.18-238.35.1.el5.ia64, kernel-PAE-2.6.18-238.35.1.el5 +18
Fixes 5 records
Priority MEDIUM 41
The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service (disrupted…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.05616 · Published 2012-05-24 · Partial fix
Priority LOW 34
Xen 4.1 before 4.1.1 and 4.0 before 4.0.2, when using PCI passthrough on Intel VT-d chipsets that do not have interrupt remapping, allows guest OS users to gain host OS privileges by "using DMA to generate MSI interrupts…
CVSS 2.0HIGH 7.4· Adjacent network · Low privileges · Interaction — · EPSS 0.00852 · Published 2011-08-12 · Partial fix CWE-264
Priority LOW 32
The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writi…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00499 · Published 2012-06-21 · Fixed CWE-264
Priority LOW 32
Stack-based buffer overflow in the hfs_mac2asc function in fs/hfs/trans.c in the Linux kernel 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via an HFS image with a crafte…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00444 · Published 2012-01-27 · Fixed CWE-119
Priority LOW 22
The Linux kernel before 3.2.2 does not properly restrict SG_IO ioctl calls, which allows local users to bypass intended restrictions on disk read and write operations by sending a SCSI command to (1) a partition block de…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00566 · Published 2012-07-03 · Partial fix CWE-264