Red Hat Security AdvisoryRHSA-2014:1023
kernel security and bug fix update
Released 2014-08-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-123.6.3.el7, kernel-abi-whitelists-3.10.0-123.6.3.el7, kernel-debug-3.10.0-123.6.3.el7 +6
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-doc-3.10.0-123.6.3.el7, kernel-tools-libs-devel-3.10.0-123.6.3.el7, python-perf-3.10.0-123.6.3.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-123.6.3.el7, kernel-abi-whitelists-3.10.0-123.6.3.el7, kernel-debug-3.10.0-123.6.3.el7 +6
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-doc-3.10.0-123.6.3.el7, kernel-tools-libs-devel-3.10.0-123.6.3.el7, python-perf-3.10.0-123.6.3.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-123.6.3.el7, kernel-abi-whitelists-3.10.0-123.6.3.el7, kernel-bootwrapper-3.10.0-123.6.3.el7 +9
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-doc-3.10.0-123.6.3.el7, kernel-tools-libs-devel-3.10.0-123.6.3.el7, python-perf-3.10.0-123.6.3.el7
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-123.6.3.el7, kernel-abi-whitelists-3.10.0-123.6.3.el7, kernel-debug-3.10.0-123.6.3.el7 +6
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-doc-3.10.0-123.6.3.el7, kernel-tools-libs-devel-3.10.0-123.6.3.el7, python-perf-3.10.0-123.6.3.el7
Fixes 6 records
Priority LOW 38
Race condition in the mac80211 subsystem in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via network traffic that improperly interacts with the WLAN_STA_PS_STA state…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.04338 · Published 2014-04-14 · Fixed CWE-362
Priority LOW 36
Race condition in the ath_tx_aggr_sleep function in drivers/net/wireless/ath/ath9k/xmit.c in the Linux kernel before 3.13.7 allows remote attackers to cause a denial of service (system crash) via a large amount of networ…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.02744 · Published 2014-04-01 · Fixed CWE-362
Priority LOW 32
The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a certain backlog value, which allows remote attackers to cause a denial of service (socket outage) vi…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.05926 · Published 2014-07-03 · Fixed
Priority LOW 32
arch/s390/kernel/ptrace.c in the Linux kernel before 3.15.8 on the s390 platform does not properly restrict address-space control operations in PTRACE_POKEUSR_AREA requests, which allows local users to obtain read and wr…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.00455 · Published 2014-08-01 · Fixed CWE-269
Priority LOW 22
The arch_dup_task_struct function in the Transactional Memory (TM) implementation in arch/powerpc/kernel/process.c in the Linux kernel before 3.13.7 on the powerpc platform does not properly interact with the clone and f…
CVSS 2.0MEDIUM 4.7· Local · No auth · Interaction — · EPSS 0.00401 · Published 2014-04-01 · Fixed CWE-20
Priority LOW 12
The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket operations based on the opener of a socket, which allows local users to bypass intended access restriction…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00534 · Published 2014-04-27 · Fixed CWE-264
THREATIST.IORead the docs