Red Hat Security AdvisoryRHSA-2015:0102
kernel security and bug fix update
Released 2015-01-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-123.20.1.el7, kernel-abi-whitelists-3.10.0-123.20.1.el7, kernel-debug-3.10.0-123.20.1.el7 +6
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-doc-3.10.0-123.20.1.el7, kernel-tools-libs-devel-3.10.0-123.20.1.el7, python-perf-3.10.0-123.20.1.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-123.20.1.el7, kernel-abi-whitelists-3.10.0-123.20.1.el7, kernel-debug-3.10.0-123.20.1.el7 +6
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-doc-3.10.0-123.20.1.el7, kernel-tools-libs-devel-3.10.0-123.20.1.el7, python-perf-3.10.0-123.20.1.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-123.20.1.el7, kernel-abi-whitelists-3.10.0-123.20.1.el7, kernel-bootwrapper-3.10.0-123.20.1.el7 +9
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-doc-3.10.0-123.20.1.el7, kernel-tools-libs-devel-3.10.0-123.20.1.el7, python-perf-3.10.0-123.20.1.el7
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-123.20.1.el7, kernel-abi-whitelists-3.10.0-123.20.1.el7, kernel-debug-3.10.0-123.20.1.el7 +6
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-doc-3.10.0-123.20.1.el7, kernel-tools-libs-devel-3.10.0-123.20.1.el7, python-perf-3.10.0-123.20.1.el7
Fixes 6 records
Priority MEDIUM 40
The SMB2_tcon function in fs/cifs/smb2pdu.c in the Linux kernel before 3.16.3 allows remote CIFS servers to cause a denial of service (NULL pointer dereference and client system crash) or possibly have unspecified other…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03725 · Published 2014-09-28 · Fixed CWE-399
Priority LOW 34
The implementation of certain splice_write file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service (syste…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.01176 · Published 2015-03-16 · Fixed CWE-264
Priority LOW 31
The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a denial of service (NULL pointer dereferenc…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0523 · Published 2014-11-30 · Partial fix CWE-399
Priority LOW 22
mm/shmem.c in the Linux kernel through 3.15.1 does not properly implement the interaction between range notification and hole punching, which allows local users to cause a denial of service (i_mutex hold) by using the mm…
CVSS 2.0MEDIUM 4.7· Local · No auth · Interaction — · EPSS 0.0044 · Published 2014-06-23 · Fixed
Priority LOW 19
The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-refere…
CVSS 2.0MEDIUM 4.0· Local · No auth · Interaction — · EPSS 0.00505 · Published 2014-09-01 · Partial fix CWE-20
Priority LOW 19
Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (uncontrolled recursion, and system cr…
CVSS 2.0MEDIUM 4.0· Local · No auth · Interaction — · EPSS 0.00505 · Published 2014-09-01 · Partial fix CWE-399
THREATIST.IORead the docs