Red Hat Security AdvisoryRHSA-2014:0771
kernel security and bug fix update
Released 2014-06-19 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-431.20.3.el6, kernel-abi-whitelists-2.6.32-431.20.3.el6, kernel-debug-2.6.32-431.20.3.el6 +6
- Red Hat Enterprise Linux Desktop Optional (v. 6) kernel-2.6.32-431.20.3.el6, python-perf-2.6.32-431.20.3.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-431.20.3.el6, kernel-abi-whitelists-2.6.32-431.20.3.el6, kernel-debug-2.6.32-431.20.3.el6 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel-2.6.32-431.20.3.el6, python-perf-2.6.32-431.20.3.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-431.20.3.el6, kernel-abi-whitelists-2.6.32-431.20.3.el6, kernel-bootwrapper-2.6.32-431.20.3.el6 +9
- Red Hat Enterprise Linux Server Optional (v. 6) kernel-2.6.32-431.20.3.el6, python-perf-2.6.32-431.20.3.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-431.20.3.el6, kernel-abi-whitelists-2.6.32-431.20.3.el6, kernel-debug-2.6.32-431.20.3.el6 +6
- Red Hat Enterprise Linux Workstation Optional (v. 6) kernel-2.6.32-431.20.3.el6, python-perf-2.6.32-431.20.3.el6
Fixes 7 records
Priority CRITICAL 93KEV
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE comma…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.37233 · Published 2014-06-07 · Fixed
Priority LOW 32
The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree op…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00452 · Published 2014-05-11 · Fixed CWE-754
Priority LOW 26
The __do_follow_link function in fs/namei.c in the Linux kernel before 2.6.33 does not properly handle the last pathname component during use of certain filesystems, which allows local users to cause a denial of service…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00538 · Published 2014-06-23 · Fixed CWE-416
Priority LOW 23
arch/s390/kernel/head64.S in the Linux kernel before 3.13.5 on the s390 platform does not properly handle attempted use of the linkage stack, which allows local users to cause a denial of service (system crash) by execut…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00452 · Published 2014-02-28 · Fixed CWE-20
Priority LOW 23
The security_context_to_sid_core function in security/selinux/ss/services.c in the Linux kernel before 3.13.4 allows local users to cause a denial of service (system crash) by leveraging the CAP_MAC_ADMIN capability to s…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00595 · Published 2014-02-28 · Fixed CWE-20
Priority LOW 21
The lbs_debugfs_write function in drivers/net/wireless/libertas/debugfs.c in the Linux kernel through 3.12.1 allows local users to cause a denial of service (OOPS) by leveraging root privileges for a zero-length write op…
CVSS 2.0MEDIUM 4.4· Local · Low privileges · Interaction — · EPSS 0.00375 · Published 2013-11-27 · Fixed CWE-189
Priority LOW 12
The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obt…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00507 · Published 2014-05-11 · Fixed CWE-200
THREATIST.IORead the docs