Red Hat Security AdvisoryRHSA-2014:0925
kernel security update
Released 2014-07-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.4) kernel-2.6.32-358.46.2.el6, python-perf-2.6.32-358.46.2.el6
- Red Hat Enterprise Linux HPC Node EUS (v. 6.4) kernel-2.6.32-358.46.2.el6, kernel-debug-2.6.32-358.46.2.el6, kernel-debug-devel-2.6.32-358.46.2.el6 +5
- Red Hat Enterprise Linux Server EUS (v. 6.4) kernel-2.6.32-358.46.2.el6, kernel-bootwrapper-2.6.32-358.46.2.el6, kernel-debug-2.6.32-358.46.2.el6 +8
- Red Hat Enterprise Linux Server Optional EUS (v. 6.4) kernel-2.6.32-358.46.2.el6, python-perf-2.6.32-358.46.2.el6
Fixes 2 records
Priority LOW 35
The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.02103 · Published 2014-07-19 · Fixed CWE-269
Priority LOW 35
The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the saved RIP address in the case of a system call that does not use IRET, which allows local users to levera…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.02324 · Published 2014-07-09 · Fixed CWE-362
