Red Hat Security AdvisoryRHSA-2014:0786
kernel security, bug fix, and enhancement update
Released 2014-06-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-123.4.2.el7, kernel-abi-whitelists-3.10.0-123.4.2.el7, kernel-debug-3.10.0-123.4.2.el7 +6
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-doc-3.10.0-123.4.2.el7, kernel-tools-libs-devel-3.10.0-123.4.2.el7, python-perf-3.10.0-123.4.2.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-123.4.2.el7, kernel-abi-whitelists-3.10.0-123.4.2.el7, kernel-debug-3.10.0-123.4.2.el7 +6
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-doc-3.10.0-123.4.2.el7, kernel-tools-libs-devel-3.10.0-123.4.2.el7, python-perf-3.10.0-123.4.2.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-123.4.2.el7, kernel-abi-whitelists-3.10.0-123.4.2.el7, kernel-bootwrapper-3.10.0-123.4.2.el7 +9
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-doc-3.10.0-123.4.2.el7, kernel-tools-libs-devel-3.10.0-123.4.2.el7, python-perf-3.10.0-123.4.2.el7
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-123.4.2.el7, kernel-abi-whitelists-3.10.0-123.4.2.el7, kernel-debug-3.10.0-123.4.2.el7 +6
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-doc-3.10.0-123.4.2.el7, kernel-tools-libs-devel-3.10.0-123.4.2.el7, python-perf-3.10.0-123.4.2.el7
Fixes 8 records
Priority CRITICAL 93KEV
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE comma…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.37233 · Published 2014-06-07 · Fixed
Priority LOW 32
Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a cr…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00951 · Published 2014-04-14 · Fixed CWE-416
Priority LOW 32
The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree op…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00452 · Published 2014-05-11 · Fixed CWE-754
Priority LOW 23
The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00649 · Published 2014-05-11 · Fixed CWE-125
Priority LOW 23
The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 do not check whether a certain length value is suffic…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00602 · Published 2014-05-11 · Fixed CWE-190
Priority LOW 16
Use-after-free vulnerability in the nfqnl_zcopy function in net/netfilter/nfnetlink_queue_core.c in the Linux kernel through 3.13.6 allows attackers to obtain sensitive information from kernel memory by leveraging the ab…
CVSS 2.0LOW 2.9· Adjacent network · No auth · Interaction — · EPSS 0.01015 · Published 2014-03-24 · Fixed CWE-416
Priority LOW 12
The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obt…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00507 · Published 2014-05-11 · Fixed CWE-200
Priority LOW 12
Array index error in the aio_read_events_ring function in fs/aio.c in the Linux kernel through 3.15.1 allows local users to obtain sensitive information from kernel memory via a large head value.
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.0045 · Published 2014-06-25 · Fixed
THREATIST.IORead the docs