Red Hat Security AdvisoryRHSA-2013:1801
kernel security, bug fix, and enhancement update
Released 2013-12-12 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-431.1.2.el6, kernel-abi-whitelists-2.6.32-431.1.2.el6, kernel-debug-2.6.32-431.1.2.el6 +5
- Red Hat Enterprise Linux Desktop Optional (v. 6) kernel-2.6.32-431.1.2.el6, python-perf-2.6.32-431.1.2.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-431.1.2.el6, kernel-abi-whitelists-2.6.32-431.1.2.el6, kernel-debug-2.6.32-431.1.2.el6 +5
- Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel-2.6.32-431.1.2.el6, python-perf-2.6.32-431.1.2.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-431.1.2.el6, kernel-abi-whitelists-2.6.32-431.1.2.el6, kernel-bootwrapper-2.6.32-431.1.2.el6 +8
- Red Hat Enterprise Linux Server Optional (v. 6) kernel-2.6.32-431.1.2.el6, python-perf-2.6.32-431.1.2.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-431.1.2.el6, kernel-abi-whitelists-2.6.32-431.1.2.el6, kernel-debug-2.6.32-431.1.2.el6 +5
- Red Hat Enterprise Linux Workstation Optional (v. 6) kernel-2.6.32-431.1.2.el6, python-perf-2.6.32-431.1.2.el6
Fixes 4 records
Priority LOW 31
The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system cra…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00589 · Published 2013-11-04 · Fixed CWE-264
Priority LOW 29
The KVM subsystem in the Linux kernel through 3.12.5 allows local users to gain privileges or cause a denial of service (system crash) via a VAPIC synchronization operation involving a page-end address.
CVSS 2.0MEDIUM 6.2· Local · No auth · Interaction — · EPSS 0.00613 · Published 2013-12-14 · Partial fix CWE-20
Priority LOW 29
The apic_get_tmcct function in arch/x86/kvm/lapic.c in the KVM subsystem in the Linux kernel through 3.12.5 allows guest OS users to cause a denial of service (divide-by-zero error and host OS crash) via crafted modifica…
CVSS 2.0MEDIUM 5.7· Adjacent network · No auth · Interaction — · EPSS 0.01446 · Published 2013-12-14 · Partial fix CWE-189
Priority LOW 12
The do_tkill function in kernel/signal.c in the Linux kernel before 3.8.9 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via a crafted applicatio…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00593 · Published 2013-06-07 · Fixed CWE-399
THREATIST.IORead the docs