Red Hat Security AdvisoryRHSA-2012:0481
kernel security, bug fix, and enhancement update
Released 2012-04-17 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-220.13.1.el6, kernel-debug-2.6.32-220.13.1.el6, kernel-debug-devel-2.6.32-220.13.1.el6 +5
- Red Hat Enterprise Linux Desktop Optional (v. 6) kernel-2.6.32-220.13.1.el6, python-perf-2.6.32-220.13.1.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-220.13.1.el6, kernel-debug-2.6.32-220.13.1.el6, kernel-debug-devel-2.6.32-220.13.1.el6 +5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel-2.6.32-220.13.1.el6, python-perf-2.6.32-220.13.1.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-220.13.1.el6, kernel-bootwrapper-2.6.32-220.13.1.el6, kernel-debug-2.6.32-220.13.1.el6 +8
- Red Hat Enterprise Linux Server Optional (v. 6) kernel-2.6.32-220.13.1.el6, python-perf-2.6.32-220.13.1.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-220.13.1.el6, kernel-debug-2.6.32-220.13.1.el6, kernel-debug-devel-2.6.32-220.13.1.el6 +5
- Red Hat Enterprise Linux Workstation Optional (v. 6) kernel-2.6.32-220.13.1.el6, python-perf-2.6.32-220.13.1.el6
Fixes 4 records
Priority LOW 34
The regset (aka register set) feature in the Linux kernel before 3.2.10 does not properly handle the absence of .get and .set methods, which allows local users to cause a denial of service (NULL pointer dereference) or p…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00351 · Published 2012-05-17 · Partial fix CWE-476
Priority LOW 25
The cifs_lookup function in fs/cifs/dir.c in the Linux kernel before 3.2.10 allows local users to cause a denial of service (OOPS) via attempted access to a special file, as demonstrated by a FIFO.
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.004 · Published 2012-05-17 · Partial fix CWE-20
Priority LOW 25
The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONE_IO feature, which allows local users to cause a denial of service (I/O instability) by starting multiple proce…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00468 · Published 2012-05-17 · Fixed CWE-400
Priority LOW 19
The sysrq_sysctl_handler function in kernel/sysctl.c in the Linux kernel before 2.6.39 does not require the CAP_SYS_ADMIN capability to modify the dmesg_restrict value, which allows local users to bypass intended access…
CVSS 2.0MEDIUM 4.0· Local · No auth · Interaction — · EPSS 0.00349 · Published 2012-05-24 · Partial fix CWE-264
THREATIST.IORead the docs