Red Hat Security Advisory

RHSA-2014:1843

kernel security and bug fix update

Released 2014-11-11 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-504.1.3.el6, kernel-abi-whitelists-2.6.32-504.1.3.el6, kernel-debug-2.6.32-504.1.3.el6 +6
Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf-2.6.32-504.1.3.el6
Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-504.1.3.el6, kernel-abi-whitelists-2.6.32-504.1.3.el6, kernel-debug-2.6.32-504.1.3.el6 +6
Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf-2.6.32-504.1.3.el6
Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-504.1.3.el6, kernel-abi-whitelists-2.6.32-504.1.3.el6, kernel-bootwrapper-2.6.32-504.1.3.el6 +9
Red Hat Enterprise Linux Server Optional (v. 6) python-perf-2.6.32-504.1.3.el6
Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-504.1.3.el6, kernel-abi-whitelists-2.6.32-504.1.3.el6, kernel-debug-2.6.32-504.1.3.el6 +6
Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf-2.6.32-504.1.3.el6

Fixes 4 records

TI-2014-02548 CVE-2014-3185 · GHSA-2jr7-m5j8-2vf4

Multiple buffer overflows in the command_port_read_callback function in…

LOW 31

Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat USB Serial Driver in the Linux kernel before 3.16.2 allow physically proximate attackers to execute…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00596 Published 2014-09-28 Partial fix CWE-119

TI-2014-02966 CVE-2014-3646 · GHSA-xq4c-q7v4-538j

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have…

LOW 25

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPID instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafte…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00428 Published 2014-11-10 Partial fix

TI-2014-02932 CVE-2014-3611 · GHSA-fjrx-4j65-6mrx

Race condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM…

LOW 21

Race condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM subsystem in the Linux kernel through 3.17.2 allows guest OS users to cause a denial of service (host OS crash) by leveraging inco…

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00294 Published 2014-11-10 Partial fix CWE-362

TI-2014-02965 CVE-2014-3645 · GHSA-26g3-v5f7-pgv9

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an…

LOW 11

arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit handler for the INVEPT instruction, which allows guest OS users to cause a denial of service (guest OS crash) via a crafted ap…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00409 Published 2014-11-10 Partial fix CWE-20