Red Hat Security AdvisoryRHSA-2015:1221
kernel security, bug fix, and enhancement update
Released 2015-07-14 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-504.30.3.el6, kernel-abi-whitelists-2.6.32-504.30.3.el6, kernel-debug-2.6.32-504.30.3.el6 +6
- Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf-2.6.32-504.30.3.el6
- Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-504.30.3.el6, kernel-abi-whitelists-2.6.32-504.30.3.el6, kernel-debug-2.6.32-504.30.3.el6 +6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf-2.6.32-504.30.3.el6
- Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-504.30.3.el6, kernel-abi-whitelists-2.6.32-504.30.3.el6, kernel-bootwrapper-2.6.32-504.30.3.el6 +9
- Red Hat Enterprise Linux Server Optional (v. 6) python-perf-2.6.32-504.30.3.el6
- Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-504.30.3.el6, kernel-abi-whitelists-2.6.32-504.30.3.el6, kernel-debug-2.6.32-504.30.3.el6 +6
- Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf-2.6.32-504.30.3.el6
Fixes 5 records
Priority LOW 29
The stack randomization feature in the Linux kernel before 3.19.1 on 64-bit platforms uses incorrect data types for the results of bitwise left-shift operations, which makes it easier for attackers to bypass the ASLR pro…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03814 · Published 2015-03-16 · Partial fix CWE-264
Priority LOW 27
The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allows local users to gain privileges or cause a denial of…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.02472 · Published 2015-08-06 · Fixed
Priority LOW 25
The tty_open function in drivers/tty/tty_io.c in the Linux kernel before 3.1.1 mishandles a driver-lookup failure, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or poss…
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.0037 · Published 2016-05-02 · Fixed
Priority LOW 22
The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit settin…
CVSS 2.0LOW 3.3· Adjacent network · No auth · Interaction — · EPSS 0.03006 · Published 2015-05-27 · Partial fix CWE-17
Priority LOW 11
arch/x86/kernel/entry_64.S in the Linux kernel before 3.19.2 does not prevent the TS_COMPAT flag from reaching a user-mode task, which might allow local users to bypass the seccomp or audit protection mechanism via a cra…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.0041 · Published 2015-05-27 · Partial fix CWE-264
THREATIST.IORead the docs