Red Hat Security AdvisoryRHSA-2012:1540
kernel security, bug fix, and enhancement update
Released 2012-12-04 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux (v. 5 server) kernel-2.6.18-308.24.1.el5, kernel-2.6.18-308.24.1.el5.ia64, kernel-PAE-2.6.18-308.24.1.el5 +18
- Red Hat Enterprise Linux Desktop (v. 5 client) kernel-2.6.18-308.24.1.el5, kernel-PAE-2.6.18-308.24.1.el5, kernel-PAE-devel-2.6.18-308.24.1.el5 +8
Fixes 6 records
Priority LOW 32
Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of service (slab corruption and system crash) by sending packets to an application that sets socket op…
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.0285 · Published 2012-10-03 · Fixed CWE-362
Priority LOW 31
The XENMEM_exchange handler in Xen 4.2 and earlier does not properly check the memory address, which allows local PV guest OS administrators to cause a denial of service (crash) or possibly gain privileges via unspecifie…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00406 · Published 2012-12-13 · Fixed CWE-20
Priority LOW 20
The rds_ib_xmit function in net/rds/ib_send.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel 3.7.4 and earlier allows local users to cause a denial of service (BUG_ON and kernel panic)…
CVSS 2.0MEDIUM 4.4· Local · Low privileges · Interaction — · EPSS 0.00329 · Published 2013-01-22 · Partial fix
Priority LOW 12
Xen 3.4 through 4.2, and possibly earlier versions, does not properly synchronize the p2m and m2p tables when the set_p2m_entry function fails, which allows local HVM guest OS administrators to cause a denial of service…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00437 · Published 2012-11-21 · Fixed CWE-16
Priority LOW 11
Xen 3.4 through 4.2, and possibly earlier versions, allows local guest OS administrators to cause a denial of service (Xen infinite loop and physical CPU consumption) by setting a VCPU with an "inappropriate deadline."
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.00398 · Published 2012-11-21 · Fixed CWE-399
Priority LOW 10
Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized.
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.00285 · Published 2012-12-21 · Fixed CWE-362