Red Hat Security AdvisoryRHSA-2015:0695
kernel security and bug fix update
Released 2015-03-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Server AUS (v. 6.2) kernel-2.6.32-220.60.2.el6, kernel-debug-2.6.32-220.60.2.el6, kernel-debug-devel-2.6.32-220.60.2.el6 +5
- Red Hat Enterprise Linux Server Optional AUS (v. 6.2) kernel-2.6.32-220.60.2.el6, python-perf-2.6.32-220.60.2.el6
Fixes 5 records
Priority CRITICAL 93KEV
Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memor…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.03212 · Published 2013-04-13 · Fixed CWE-190
Priority LOW 31
The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly restrict use of User Verbs for registration of memory regions, which allows loc…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00424 · Published 2015-03-16 · Partial fix CWE-264
Priority LOW 31
The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation in the Linux kernel before 3.17.4, when ASCONF is used, allows remote attackers to cause a denial of service (NULL pointer dereferenc…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0523 · Published 2014-11-30 · Partial fix CWE-399
Priority LOW 19
The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-refere…
CVSS 2.0MEDIUM 4.0· Local · No auth · Interaction — · EPSS 0.00505 · Published 2014-09-01 · Partial fix CWE-20
Priority LOW 19
Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (uncontrolled recursion, and system cr…
CVSS 2.0MEDIUM 4.0· Local · No auth · Interaction — · EPSS 0.00505 · Published 2014-09-01 · Partial fix CWE-399