Red Hat Security Advisory

RHSA-2015:0803

kernel security and bug fix update

Released 2015-04-14 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 6.4) kernel-2.6.32-358.59.1.el6, kernel-debug-2.6.32-358.59.1.el6, kernel-debug-devel-2.6.32-358.59.1.el6 +5
Red Hat Enterprise Linux Server Optional AUS (v. 6.4) kernel-2.6.32-358.59.1.el6, python-perf-2.6.32-358.59.1.el6

Fixes 4 records

TI-2013-02292 CVE-2013-2596 · GHSA-xg37-4cgv-wc3c

Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel…

CRITICAL 93KEV

Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certain Motorola build of Android 4.1.2 and other products, allows local users to create a read-write memor…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.03212 Published 2013-04-13 Fixed CWE-190

TI-2014-06774 CVE-2014-8159 · GHSA-355g-wjmx-fcfq

The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on…

LOW 31

The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL) 6 does not properly restrict use of User Verbs for registration of memory regions, which allows loc…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.00424 Published 2015-03-16 Partial fix CWE-264

TI-2014-04467 CVE-2014-5472 · GHSA-8jr9-77qv-x3wr

The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel…

LOW 19

The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (unkillable mount process) via a crafted iso9660 image with a self-refere…

CVSS 2.0MEDIUM 4.0 Local No auth Interaction — EPSS 0.00505 Published 2014-09-01 Partial fix CWE-20

TI-2014-04466 CVE-2014-5471 · GHSA-vgw5-xv43-8v8j

Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in…

LOW 19

Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users to cause a denial of service (uncontrolled recursion, and system cr…

CVSS 2.0MEDIUM 4.0 Local No auth Interaction — EPSS 0.00505 Published 2014-09-01 Partial fix CWE-399