Red Hat Security AdvisoryRHSA-2014:0328
kernel security and bug fix update
Released 2014-03-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-431.11.2.el6, kernel-abi-whitelists-2.6.32-431.11.2.el6, kernel-debug-2.6.32-431.11.2.el6 +6
- Red Hat Enterprise Linux Desktop Optional (v. 6) kernel-2.6.32-431.11.2.el6, python-perf-2.6.32-431.11.2.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-431.11.2.el6, kernel-abi-whitelists-2.6.32-431.11.2.el6, kernel-debug-2.6.32-431.11.2.el6 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel-2.6.32-431.11.2.el6, python-perf-2.6.32-431.11.2.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-431.11.2.el6, kernel-abi-whitelists-2.6.32-431.11.2.el6, kernel-bootwrapper-2.6.32-431.11.2.el6 +9
- Red Hat Enterprise Linux Server Optional (v. 6) kernel-2.6.32-431.11.2.el6, python-perf-2.6.32-431.11.2.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-431.11.2.el6, kernel-abi-whitelists-2.6.32-431.11.2.el6, kernel-debug-2.6.32-431.11.2.el6 +6
- Red Hat Enterprise Linux Workstation Optional (v. 6) kernel-2.6.32-431.11.2.el6, python-perf-2.6.32-431.11.2.el6
Fixes 7 records
Priority MEDIUM 44
The sctp_sf_do_5_1D_ce function in net/sctp/sm_statefuns.c in the Linux kernel through 3.13.6 does not validate certain auth_enable and auth_capable fields before making an sctp_sf_authenticate call, which allows remote…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.07179 · Published 2014-03-11 · Partial fix CWE-476
Priority LOW 32
The cifs_iovec_write function in fs/cifs/file.c in the Linux kernel through 3.13.5 does not properly handle uncached write operations that copy fewer than the requested number of bytes, which allows local users to obtain…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00414 · Published 2014-02-28 · Fixed CWE-119
Priority LOW 32
Heap-based buffer overflow in the wdm_in_callback function in drivers/usb/class/cdc-wdm.c in the Linux kernel before 3.8.4 allows physically proximate attackers to cause a denial of service (system crash) or possibly exe…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00788 · Published 2013-03-22 · Fixed CWE-119
Priority LOW 26
The get_rx_bufs function in drivers/vhost/net.c in the vhost-net subsystem in the Linux kernel package before 2.6.32-431.11.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly handle vhost_get_vq_desc errors, which…
CVSS 2.0MEDIUM 5.5· Adjacent network · Low privileges · Interaction — · EPSS 0.0062 · Published 2014-03-26 · Fixed
Priority LOW 23
The packet_recvmsg function in net/packet/af_packet.c in the Linux kernel before 3.12.4 updates a certain length value before ensuring that an associated data structure has been initialized, which allows local users to o…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.0048 · Published 2014-01-06 · Partial fix CWE-20
Priority LOW 23
The mISDN_sock_recvmsg function in drivers/isdn/mISDN/socket.c in the Linux kernel before 3.12.4 does not ensure that a certain length value is consistent with the size of an associated data structure, which allows local…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00434 · Published 2014-01-06 · Partial fix CWE-20
Priority LOW 11
The nfs_can_extend_write function in fs/nfs/write.c in the Linux kernel before 3.13.3 relies on a write delegation to extend a write operation without a certain up-to-date verification, which allows local users to obtain…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00411 · Published 2014-02-28 · Partial fix CWE-200
THREATIST.IORead the docs