Red Hat Security AdvisoryRHSA-2014:1724
kernel security and bug fix update
Released 2014-10-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-123.9.2.el7, kernel-abi-whitelists-3.10.0-123.9.2.el7, kernel-debug-3.10.0-123.9.2.el7 +6
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-doc-3.10.0-123.9.2.el7, kernel-tools-libs-devel-3.10.0-123.9.2.el7, python-perf-3.10.0-123.9.2.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-123.9.2.el7, kernel-abi-whitelists-3.10.0-123.9.2.el7, kernel-debug-3.10.0-123.9.2.el7 +6
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-doc-3.10.0-123.9.2.el7, kernel-tools-libs-devel-3.10.0-123.9.2.el7, python-perf-3.10.0-123.9.2.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-123.9.2.el7, kernel-abi-whitelists-3.10.0-123.9.2.el7, kernel-bootwrapper-3.10.0-123.9.2.el7 +9
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-doc-3.10.0-123.9.2.el7, kernel-tools-libs-devel-3.10.0-123.9.2.el7, python-perf-3.10.0-123.9.2.el7
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-123.9.2.el7, kernel-abi-whitelists-3.10.0-123.9.2.el7, kernel-debug-3.10.0-123.9.2.el7 +6
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-doc-3.10.0-123.9.2.el7, kernel-tools-libs-devel-3.10.0-123.9.2.el7, python-perf-3.10.0-123.9.2.el7
Fixes 5 records
Priority MEDIUM 40
The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is enabled, allows remote attackers to cause a denial of service (NULL pointer dereference and OOPS) by…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.05794 · Published 2014-08-01 · Fixed CWE-476
Priority LOW 25
arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafte…
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00428 · Published 2014-11-10 · Partial fix
Priority LOW 22
sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not ensure possession of a read/write lock, which allows local users to cause a denial of service (use-after-free) and obtain…
CVSS 2.0MEDIUM 4.6· Local · No auth · Interaction — · EPSS 0.00498 · Published 2014-07-03 · Partial fix CWE-416
Priority LOW 21
Race condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM subsystem in the Linux kernel through 3.17.2 allows guest OS users to cause a denial of service (host OS crash) by leveraging inco…
CVSS 3.1MEDIUM 4.7· Local · Low privileges · No interaction · EPSS 0.00294 · Published 2014-11-10 · Partial fix CWE-362
Priority LOW 11
arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit handler for the INVEPT instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted ap…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00409 · Published 2014-11-10 · Partial fix CWE-20
THREATIST.IORead the docs