Red Hat Security AdvisoryRHSA-2013:0911
kernel security, bug fix, and enhancement update
Released 2013-06-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-358.11.1.el6, kernel-debug-2.6.32-358.11.1.el6, kernel-debug-devel-2.6.32-358.11.1.el6 +5
- Red Hat Enterprise Linux Desktop Optional (v. 6) kernel-2.6.32-358.11.1.el6, python-perf-2.6.32-358.11.1.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-358.11.1.el6, kernel-debug-2.6.32-358.11.1.el6, kernel-debug-devel-2.6.32-358.11.1.el6 +5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel-2.6.32-358.11.1.el6, python-perf-2.6.32-358.11.1.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-358.11.1.el6, kernel-bootwrapper-2.6.32-358.11.1.el6, kernel-debug-2.6.32-358.11.1.el6 +8
- Red Hat Enterprise Linux Server Optional (v. 6) kernel-2.6.32-358.11.1.el6, python-perf-2.6.32-358.11.1.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-358.11.1.el6, kernel-debug-2.6.32-358.11.1.el6, kernel-debug-devel-2.6.32-358.11.1.el6 +5
- Red Hat Enterprise Linux Workstation Optional (v. 6) kernel-2.6.32-358.11.1.el6, python-perf-2.6.32-358.11.1.el6
Fixes 4 records
Priority MEDIUM 41
The veth (aka virtual Ethernet) driver in the Linux kernel before 2.6.34 does not properly manage skbs during congestion, which allows remote attackers to cause a denial of service (system crash) by leveraging lack of sk…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.04189 · Published 2013-05-03 · Fixed CWE-399
Priority LOW 34
The KVM subsystem in the Linux kernel before 3.0 does not check whether kernel addresses are specified during allocation of memory slots for use in a guest's physical address space, which allows local users to gain privi…
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00449 · Published 2013-07-16 · Partial fix CWE-20
Priority LOW 26
A certain Red Hat patch to the KVM subsystem in the kernel package before 2.6.32-358.11.1.el6 on Red Hat Enterprise Linux (RHEL) 6 does not properly implement the PV EOI feature, which allows guest OS users to cause a de…
CVSS 2.0MEDIUM 5.7· Adjacent network · No auth · Interaction — · EPSS 0.00487 · Published 2013-07-16 · Fixed CWE-362
Priority LOW 22
A certain Red Hat patch to the do_filp_open function in fs/namei.c in the kernel package before 2.6.32-358.11.1.el6 on Red Hat Enterprise Linux (RHEL) 6 does not properly handle failure to obtain write permissions, which…
CVSS 2.0MEDIUM 4.7· Local · No auth · Interaction — · EPSS 0.00322 · Published 2013-07-16 · Fixed CWE-264
THREATIST.IORead the docs