Red Hat Security AdvisoryRHSA-2014:0981
kernel security, bug fix, and enhancement update
Released 2014-07-29 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-431.23.3.el6, kernel-abi-whitelists-2.6.32-431.23.3.el6, kernel-debug-2.6.32-431.23.3.el6 +6
- Red Hat Enterprise Linux Desktop Optional (v. 6) kernel-2.6.32-431.23.3.el6, python-perf-2.6.32-431.23.3.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-431.23.3.el6, kernel-abi-whitelists-2.6.32-431.23.3.el6, kernel-debug-2.6.32-431.23.3.el6 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) kernel-2.6.32-431.23.3.el6, python-perf-2.6.32-431.23.3.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-431.23.3.el6, kernel-abi-whitelists-2.6.32-431.23.3.el6, kernel-bootwrapper-2.6.32-431.23.3.el6 +9
- Red Hat Enterprise Linux Server Optional (v. 6) kernel-2.6.32-431.23.3.el6, python-perf-2.6.32-431.23.3.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-431.23.3.el6, kernel-abi-whitelists-2.6.32-431.23.3.el6, kernel-debug-2.6.32-431.23.3.el6 +6
- Red Hat Enterprise Linux Workstation Optional (v. 6) kernel-2.6.32-431.23.3.el6, python-perf-2.6.32-431.23.3.el6
Fixes 8 records
Priority LOW 38
Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via network traffic that improperly interacts with the WLAN_STA_PS_STA state…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.04338 · Published 2014-04-14 · Fixed CWE-362
Priority LOW 36
Race condition in the ath_tx_aggr_sleep function in drivers/net/wireless/ath/ath9k/xmit.c in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via a large amount of networ…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.02744 · Published 2014-04-01 · Fixed CWE-362
Priority LOW 32
Integer overflow in the ping_init_sock function in net/ipv4/ping.c in the Linux kernel through 3.14.1 allows local users to cause a denial of service (use-after-free and system crash) or possibly gain privileges via a cr…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00951 · Published 2014-04-14 · Fixed CWE-416
Priority LOW 23
The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 uses the reverse order in a certain subtraction, which allows local users to cause…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00649 · Published 2014-05-11 · Fixed CWE-125
Priority LOW 23
The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/core/filter.c in the Linux kernel through 3.14.3 do not check whether a certain length value is suffic…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00602 · Published 2014-05-11 · Fixed CWE-190
Priority LOW 23
The futex_wait_requeue_pi function in kernel/futex.c in the Linux kernel before 3.5.1 does not ensure that calls have two different futex addresses, which allows local users to cause a denial of service (NULL pointer der…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00381 · Published 2014-05-26 · Fixed CWE-20
Priority LOW 22
The rds_iw_laddr_check function in net/rds/iw.c in the Linux kernel through 3.14 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a…
CVSS 2.0MEDIUM 4.7· Local · No auth · Interaction — · EPSS 0.00403 · Published 2014-04-01 · Fixed CWE-476
Priority LOW 22
The rds_ib_laddr_check function in net/rds/ib.c in the Linux kernel before 3.12.8 allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via…
CVSS 2.0MEDIUM 4.7· Local · No auth · Interaction — · EPSS 0.00476 · Published 2014-03-24 · Fixed CWE-476
THREATIST.IORead the docs