Red Hat Security AdvisoryRHSA-2012:0743
kernel security and bug fix update
Released 2012-06-18 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-220.23.1.el6, kernel-debug-2.6.32-220.23.1.el6, kernel-debug-devel-2.6.32-220.23.1.el6 +5
- Red Hat Enterprise Linux Desktop Optional (v. 6) kernel-2.6.32-220.23.1.el6, python-perf-2.6.32-220.23.1.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-220.23.1.el6, kernel-debug-2.6.32-220.23.1.el6, kernel-debug-devel-2.6.32-220.23.1.el6 +5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel-2.6.32-220.23.1.el6, python-perf-2.6.32-220.23.1.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-220.23.1.el6, kernel-bootwrapper-2.6.32-220.23.1.el6, kernel-debug-2.6.32-220.23.1.el6 +8
- Red Hat Enterprise Linux Server Optional (v. 6) kernel-2.6.32-220.23.1.el6, python-perf-2.6.32-220.23.1.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-220.23.1.el6, kernel-debug-2.6.32-220.23.1.el6, kernel-debug-devel-2.6.32-220.23.1.el6 +5
- Red Hat Enterprise Linux Workstation Optional (v. 6) kernel-2.6.32-220.23.1.el6, python-perf-2.6.32-220.23.1.el6
Fixes 9 records
Priority LOW 34
Integer overflow in the drm_mode_dirtyfb_ioctl function in drivers/gpu/drm/drm_crtc.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 3.1.5 allows local users to gain privileges or cause a deni…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00381 · Published 2012-05-17 · Fixed CWE-190
Priority LOW 32
The sock_alloc_send_pskb function in net/core/sock.c in the Linux kernel before 3.4.5 does not properly validate a certain length value, which allows local users to cause a denial of service (heap-based buffer overflow a…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.0056 · Published 2012-08-09 · Fixed CWE-20
Priority LOW 32
The cap_bprm_set_creds function in security/commoncap.c in the Linux kernel before 3.3.3 does not properly handle the use of file system capabilities (aka fcaps) for implementing a privileged executable file, which allow…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00403 · Published 2012-05-17 · Partial fix CWE-264
Priority LOW 31
Buffer overflow in virt/kvm/irq_comm.c in the KVM subsystem in the Linux kernel before 3.2.24 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via vectors related to Message Sig…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00521 · Published 2013-01-22 · Fixed CWE-119
Priority LOW 25
Buffer overflow in the macvtap device driver in the Linux kernel before 3.4.5, when running in certain configurations, allows privileged KVM guest users to cause a denial of service (crash) via a long descriptor with a l…
CVSS 2.0MEDIUM 5.2· Adjacent network · Low privileges · Interaction — · EPSS 0.00713 · Published 2013-01-22 · Fixed CWE-119
Priority LOW 25
The Linux kernel before 3.3.1, when KVM is used, allows guest OS users to cause a denial of service (host OS crash) by leveraging administrative access to the guest OS, related to the pmd_none_or_clear_bad function and p…
CVSS 2.0MEDIUM 5.2· Adjacent network · Low privileges · Interaction — · EPSS 0.006 · Published 2012-05-17 · Fixed CWE-264
Priority LOW 23
The KVM implementation in the Linux kernel before 3.3.4 does not properly manage the relationships between memory slots and the iommu, which allows guest OS users to cause a denial of service (memory leak and host OS cra…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00413 · Published 2012-05-17 · Partial fix CWE-264
Priority LOW 20
The rds_ib_xmit function in net/rds/ib_send.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to cause a denial of service (BUG_ON and kernel panic)…
CVSS 2.0MEDIUM 4.4· Local · Low privileges · Interaction — · EPSS 0.00329 · Published 2013-01-22 · Partial fix
Priority LOW 18
The Linux kernel before 3.4.5 on the x86 platform, when Physical Address Extension (PAE) is enabled, does not properly use the Page Middle Directory (PMD), which allows local users to cause a denial of service (panic) vi…
CVSS 2.0MEDIUM 4.0· Local · No auth · Interaction — · EPSS 0.00256 · Published 2012-08-09 · Partial fix CWE-362
THREATIST.IORead the docs