Red Hat Security AdvisoryRHSA-2013:1026
kernel security and bug fix update
Released 2013-07-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server EUS (v. 6.2) kernel-2.6.32-220.39.1.el6, kernel-bootwrapper-2.6.32-220.39.1.el6, kernel-debug-2.6.32-220.39.1.el6 +8
- Red Hat Enterprise Linux Server Optional EUS (v. 6.2) kernel-2.6.32-220.39.1.el6, python-perf-2.6.32-220.39.1.el6
Fixes 5 records
Priority LOW 32
Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a denial of service (host OS memory corruption) or possibly have unspecified other impact via a crafted…
CVSS 2.0MEDIUM 6.8· Adjacent network · No auth · Interaction — · EPSS 0.00894 · Published 2013-03-22 · Partial fix CWE-399
Priority LOW 32
The kvm_set_msr_common function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required time_page alignment during an MSR_KVM_SYSTEM_TIME operation, which allows guest OS users to cause a denia…
CVSS 2.0MEDIUM 6.8· Adjacent network · No auth · Interaction — · EPSS 0.00946 · Published 2013-03-22 · Partial fix CWE-119
Priority LOW 30
The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPIC_REG_SELECT and IOAPIC_REG_WINDOW operations, which allows guest OS…
CVSS 2.0MEDIUM 6.2· Adjacent network · No auth · Interaction — · EPSS 0.0135 · Published 2013-03-22 · Partial fix CWE-20
Priority LOW 30
Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privileges or cause a denial of service (system crash) via a VFAT write operation on a filesystem with the u…
CVSS 2.0MEDIUM 6.2· Local · No auth · Interaction — · EPSS 0.01039 · Published 2013-02-28 · Fixed CWE-119
Priority LOW 28
fs/ext3/super.c in the Linux kernel before 3.8.4 uses incorrect arguments to functions in certain circumstances related to printk input, which allows local users to conduct format-string attacks and possibly gain privile…
CVSS 2.0MEDIUM 6.2· Local · No auth · Interaction — · EPSS 0.00577 · Published 2013-03-22 · Fixed CWE-20