Red Hat Security AdvisoryRHSA-2015:1137
kernel security and bug fix update
Released 2015-06-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-229.7.2.el7, kernel-abi-whitelists-3.10.0-229.7.2.el7, kernel-debug-3.10.0-229.7.2.el7 +7
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-229.7.2.el7, python-perf-3.10.0-229.7.2.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-229.7.2.el7, kernel-abi-whitelists-3.10.0-229.7.2.el7, kernel-debug-3.10.0-229.7.2.el7 +7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-229.7.2.el7, python-perf-3.10.0-229.7.2.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-229.7.2.ael7b, kernel-3.10.0-229.7.2.el7, kernel-abi-whitelists-3.10.0-229.7.2.ael7b +20
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-229.7.2.ael7b, kernel-tools-libs-devel-3.10.0-229.7.2.ael7b, kernel-tools-libs-devel-3.10.0-229.7.2.el7 +2
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-229.7.2.el7, kernel-abi-whitelists-3.10.0-229.7.2.el7, kernel-debug-3.10.0-229.7.2.el7 +7
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-229.7.2.el7, python-perf-3.10.0-229.7.2.el7
Fixes 7 records
Priority LOW 34
The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects of failed __copy_to_user_inatomic and __copy_from_user_inatomic calls, which all…
CVSS 2.0HIGH 7.2· Local · No auth · Interaction — · EPSS 0.01407 · Published 2015-08-08 · Fixed CWE-17
Priority LOW 30
Race condition in the key_gc_unused_keys function in security/keys/gc.c in the Linux kernel through 3.18.2 allows local users to cause a denial of service (memory corruption or panic) or possibly have unspecified other i…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00336 · Published 2015-01-09 · Fixed CWE-362
Priority LOW 29
The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, which makes it easier for attackers to bypass the ASLR pro…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03814 · Published 2015-03-16 · Partial fix CWE-264
Priority LOW 25
The nft_flush_table function in net/netfilter/nf_tables_api.c in the Linux kernel before 3.18.5 mishandles the interaction between cross-chain jumps and ruleset flushes, which allows local users to cause a denial of serv…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00367 · Published 2016-05-02 · Fixed CWE-19
Priority LOW 23
The rock_continue function in fs/isofs/rock.c in the Linux kernel through 3.18.1 does not restrict the number of Rock Ridge continuation entries, which allows local users to cause a denial of service (infinite loop, and…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00452 · Published 2014-12-26 · Partial fix CWE-399
Priority LOW 12
The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel before 3.18.2 does not validate a length value in the Extensions Reference (ER) System Use Field, which allows local users to obtain sen…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00461 · Published 2015-01-09 · Partial fix CWE-20
Priority LOW 11
arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a cra…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.0041 · Published 2015-05-27 · Partial fix CWE-264
THREATIST.IORead the docs