Red Hat Security AdvisoryRHSA-2014:0924
kernel security update
Released 2014-07-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-431.20.5.el6, kernel-abi-whitelists-2.6.32-431.20.5.el6, kernel-debug-2.6.32-431.20.5.el6 +6
- Red Hat Enterprise Linux Desktop Optional (v. 6) kernel-2.6.32-431.20.5.el6, python-perf-2.6.32-431.20.5.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-431.20.5.el6, kernel-abi-whitelists-2.6.32-431.20.5.el6, kernel-debug-2.6.32-431.20.5.el6 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel-2.6.32-431.20.5.el6, python-perf-2.6.32-431.20.5.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-431.20.5.el6, kernel-abi-whitelists-2.6.32-431.20.5.el6, kernel-bootwrapper-2.6.32-431.20.5.el6 +9
- Red Hat Enterprise Linux Server Optional (v. 6) kernel-2.6.32-431.20.5.el6, python-perf-2.6.32-431.20.5.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-431.20.5.el6, kernel-abi-whitelists-2.6.32-431.20.5.el6, kernel-debug-2.6.32-431.20.5.el6 +6
- Red Hat Enterprise Linux Workstation Optional (v. 6) kernel-2.6.32-431.20.5.el6, python-perf-2.6.32-431.20.5.el6
Fixes 2 records
Priority LOW 35
The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.02103 · Published 2014-07-19 · Fixed CWE-269
Priority LOW 35
The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to levera…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.02324 · Published 2014-07-09 · Fixed CWE-362
