Red Hat Security AdvisoryRHSA-2015:0782
kernel security and bug fix update
Released 2015-04-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Compute Node Optional EUS (v. 6.5) kernel-2.6.32-431.53.2.el6, python-perf-2.6.32-431.53.2.el6
- Red Hat Enterprise Linux HPC Node EUS (v. 6.5) kernel-2.6.32-431.53.2.el6, kernel-abi-whitelists-2.6.32-431.53.2.el6, kernel-debug-2.6.32-431.53.2.el6 +6
- Red Hat Enterprise Linux Server EUS (v. 6.5) kernel-2.6.32-431.53.2.el6, kernel-abi-whitelists-2.6.32-431.53.2.el6, kernel-bootwrapper-2.6.32-431.53.2.el6 +9
- Red Hat Enterprise Linux Server Optional EUS (v. 6.5) kernel-2.6.32-431.53.2.el6, python-perf-2.6.32-431.53.2.el6
Fixes 7 records
Priority CRITICAL 93KEV
Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memor…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.03212 · Published 2013-04-13 · Fixed CWE-190
Priority MEDIUM 55
Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.8 allows remote attackers to cause a denial of service (slab corruption and panic) or possibly have u…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09828 · Published 2015-03-16 · Fixed
Priority LOW 31
The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly restrict use of User Verbs for registration of memory regions, which allows loc…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00424 · Published 2015-03-16 · Partial fix CWE-264
Priority LOW 28
Stack-based buffer overflow in the ttusbdecfe_dvbs_diseqc_send_master_cmd function in drivers/media/usb/ttusb-dec/ttusbdecfe.c in the Linux kernel before 3.17.4 allows local users to cause a denial of service (system cra…
CVSS 2.0MEDIUM 6.1· Local · No auth · Interaction — · EPSS 0.00638 · Published 2014-11-30 · Fixed CWE-119
Priority LOW 25
arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the value in the CR4 control register remains the same after a VM entry, which allows host OS users to ki…
CVSS 3.1MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00515 · Published 2014-11-10 · Partial fix CWE-400
Priority LOW 19
The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-refere…
CVSS 2.0MEDIUM 4.0· Local · No auth · Interaction — · EPSS 0.00505 · Published 2014-09-01 · Partial fix CWE-20
Priority LOW 19
Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (uncontrolled recursion, and system cr…
CVSS 2.0MEDIUM 4.0· Local · No auth · Interaction — · EPSS 0.00505 · Published 2014-09-01 · Partial fix CWE-399