Red Hat Security AdvisoryRHSA-2013:0496
Red Hat Enterprise Linux 6 kernel update
Released 2013-02-20 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-358.el6, kernel-debug-2.6.32-358.el6, kernel-debug-devel-2.6.32-358.el6 +5
- Red Hat Enterprise Linux Desktop Optional (v. 6) kernel-2.6.32-358.el6, python-perf-2.6.32-358.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-358.el6, kernel-debug-2.6.32-358.el6, kernel-debug-devel-2.6.32-358.el6 +5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel-2.6.32-358.el6, python-perf-2.6.32-358.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-358.el6, kernel-bootwrapper-2.6.32-358.el6, kernel-debug-2.6.32-358.el6 +8
- Red Hat Enterprise Linux Server Optional (v. 6) kernel-2.6.32-358.el6, python-perf-2.6.32-358.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-358.el6, kernel-debug-2.6.32-358.el6, kernel-debug-devel-2.6.32-358.el6 +5
- Red Hat Enterprise Linux Workstation Optional (v. 6) kernel-2.6.32-358.el6, python-perf-2.6.32-358.el6
Fixes 6 records
Priority LOW 30
The translate_desc function in drivers/vhost/vhost.c in the Linux kernel before 3.7 does not properly handle cross-region descriptors, which allows guest OS users to obtain host OS privileges by leveraging KVM guest OS p…
CVSS 2.0MEDIUM 6.5· Adjacent network · Low privileges · Interaction — · EPSS 0.00644 · Published 2013-02-22 · Fixed
Priority LOW 29
The cipso_v4_validate function in net/ipv4/cipso_ipv4.c in the Linux kernel before 3.4.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impa…
CVSS 2.0MEDIUM 6.6· Local · Low privileges · Interaction — · EPSS 0.00317 · Published 2013-02-22 · Fixed CWE-119
Priority LOW 23
The xen_failsafe_callback function in Xen for the Linux kernel 2.6.23 and other versions, when running a 32-bit PVOPS guest, allows local users to cause a denial of service (guest crash) by triggering an iret fault, lead…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00366 · Published 2013-02-13 · Fixed CWE-20
Priority LOW 22
arch/x86/include/asm/pgtable.h in the Linux kernel before 3.6.2, when transparent huge pages are used, does not properly support PROT_NONE memory regions, which allows local users to cause a denial of service (system cra…
CVSS 2.0MEDIUM 4.7· Local · No auth · Interaction — · EPSS 0.00366 · Published 2013-02-22 · Fixed CWE-119
Priority LOW 21
block/scsi_ioctl.c in the Linux kernel through 3.8 does not properly consider the SCSI device class during authorization of SCSI commands, which allows local users to bypass intended access restrictions via an SG_IO ioct…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00349 · Published 2013-02-28 · Partial fix CWE-264
Priority LOW 10
Race condition in fs/ext4/extents.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from a deleted file by reading an extent that was not properly marked as uninitialized.
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.00285 · Published 2012-12-21 · Fixed CWE-362
THREATIST.IORead the docs