Red Hat Security AdvisoryRHSA-2014:0900
kernel security and bug fix update
Released 2014-07-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4) kernel-2.6.32-358.46.1.el6, python-perf-2.6.32-358.46.1.el6
- Red Hat Enterprise Linux HPC Node EUS (v. 6.4) kernel-2.6.32-358.46.1.el6, kernel-debug-2.6.32-358.46.1.el6, kernel-debug-devel-2.6.32-358.46.1.el6 +5
- Red Hat Enterprise Linux Server EUS (v. 6.4) kernel-2.6.32-358.46.1.el6, kernel-bootwrapper-2.6.32-358.46.1.el6, kernel-debug-2.6.32-358.46.1.el6 +8
- Red Hat Enterprise Linux Server Optional EUS (v. 6.4) kernel-2.6.32-358.46.1.el6, python-perf-2.6.32-358.46.1.el6
Fixes 3 records
Priority CRITICAL 93KEV
The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE comma…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.37233 · Published 2014-06-07 · Fixed
Priority LOW 32
The raw_cmd_copyin function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly handle error conditions during processing of an FDRAWCMD ioctl call, which allows local users to trigger kfree op…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00452 · Published 2014-05-11 · Fixed CWE-754
Priority LOW 12
The raw_cmd_copyout function in drivers/block/floppy.c in the Linux kernel through 3.14.3 does not properly restrict access to certain pointers during processing of an FDRAWCMD ioctl call, which allows local users to obt…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00507 · Published 2014-05-11 · Fixed CWE-200
THREATIST.IORead the docs