Red Hat Security AdvisoryRHSA-2015:1534
kernel security and bug fix update
Released 2015-08-06 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-229.11.1.el7, kernel-abi-whitelists-3.10.0-229.11.1.el7, kernel-debug-3.10.0-229.11.1.el7 +7
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-229.11.1.el7, python-perf-3.10.0-229.11.1.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-229.11.1.el7, kernel-abi-whitelists-3.10.0-229.11.1.el7, kernel-debug-3.10.0-229.11.1.el7 +7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-229.11.1.el7, python-perf-3.10.0-229.11.1.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-229.11.1.ael7b, kernel-3.10.0-229.11.1.el7, kernel-abi-whitelists-3.10.0-229.11.1.ael7b +20
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-229.11.1.ael7b, kernel-tools-libs-devel-3.10.0-229.11.1.ael7b, kernel-tools-libs-devel-3.10.0-229.11.1.el7 +2
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-229.11.1.el7, kernel-abi-whitelists-3.10.0-229.11.1.el7, kernel-debug-3.10.0-229.11.1.el7 +7
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-229.11.1.el7, python-perf-3.10.0-229.11.1.el7
Fixes 4 records
Priority LOW 31
Stack-based buffer overflow in the get_matching_model_microcode function in arch/x86/kernel/cpu/microcode/intel_early.c in the Linux kernel before 4.0 allows context-dependent attackers to gain privileges by constructing…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.0042 · Published 2015-05-27 · Fixed CWE-119
Priority LOW 27
The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allows local users to gain privileges or cause a denial of…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.02472 · Published 2015-08-06 · Fixed
Priority LOW 23
include/net/netfilter/nf_conntrack_extend.h in the netfilter subsystem in the Linux kernel before 3.14.5 uses an insufficiently large data type for certain extension data, which allows local users to cause a denial of se…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00392 · Published 2015-05-27 · Fixed
Priority LOW 22
The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit settin…
CVSS 2.0LOW 3.3· Adjacent network · No auth · Interaction — · EPSS 0.03006 · Published 2015-05-27 · Partial fix CWE-17