Red Hat Security AdvisoryRHSA-2015:1081
kernel security, bug fix, and enhancement update
Released 2015-06-09 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-504.23.4.el6, kernel-abi-whitelists-2.6.32-504.23.4.el6, kernel-debug-2.6.32-504.23.4.el6 +6
- Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf-2.6.32-504.23.4.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-504.23.4.el6, kernel-abi-whitelists-2.6.32-504.23.4.el6, kernel-debug-2.6.32-504.23.4.el6 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf-2.6.32-504.23.4.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-504.23.4.el6, kernel-abi-whitelists-2.6.32-504.23.4.el6, kernel-bootwrapper-2.6.32-504.23.4.el6 +9
- Red Hat Enterprise Linux Server Optional (v. 6) python-perf-2.6.32-504.23.4.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-504.23.4.el6, kernel-abi-whitelists-2.6.32-504.23.4.el6, kernel-debug-2.6.32-504.23.4.el6 +6
- Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf-2.6.32-504.23.4.el6
Fixes 5 records
Priority MEDIUM 52
The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine the memory locations used for encrypted data, which allows context-dependent attac…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.10027 · Published 2015-05-27 · Fixed CWE-119
Priority LOW 34
The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which all…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.01407 · Published 2015-08-08 · Fixed CWE-17
Priority LOW 23
The rock_continue function in fs/isofs/rock.c in the Linux kernel through 3.18.1 does not restrict the number of Rock Ridge continuation entries, which allows local users to cause a denial of service (infinite loop, and…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00452 · Published 2014-12-26 · Partial fix CWE-399
Priority LOW 12
The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00557 · Published 2015-01-09 · Partial fix
Priority LOW 12
The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread Local Storage (TLS) descriptors are loaded before proceeding with other steps, which makes it easier…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00436 · Published 2014-12-26 · Partial fix CWE-200
THREATIST.IORead the docs