Red Hat Security Advisory

RHSA-2015:1565

kernel-rt security, bug fix, and enhancement update

Released 2015-08-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Realtime (v. 7) kernel-rt-3.10.0-229.11.1.rt56.141.11.el7_1, kernel-rt-debug-3.10.0-229.11.1.rt56.141.11.el7_1, kernel-rt-debug-devel-3.10.0-229.11.1.rt56.141.11.el7_1 +4

Fixes 4 records

TI-2015-02354 CVE-2015-2666 · GHSA-rwf8-4gv4-8fmw

Stack-based buffer overflow in the get_matching_model_microcode function in…

LOW 31

Stack-based buffer overflow in the get_matching_model_microcode function in arch/x86/kernel/cpu/microcode/intel_early.c in the Linux kernel before 4.0 allows context-dependent attackers to gain privileges by constructing…

CVSS 2.0MEDIUM 6.9 Local No auth Interaction — EPSS 0.0042 Published 2015-05-27 Fixed CWE-119

TI-2015-03076 CVE-2015-3636 · GHSA-67pv-68g5-4j93

The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not…

LOW 27

The ping_unhash function in net/ipv4/ping.c in the Linux kernel before 4.0.3 does not initialize a certain list data structure during an unhash operation, which allows local users to gain privileges or cause a denial of…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.02472 Published 2015-08-06 Fixed

TI-2014-07900 CVE-2014-9715 · GHSA-ff56-mpjv-8r2j

include/net/netfilter/nf_conntrack_extend.h in the netfilter subsystem in the Linux…

LOW 23

include/net/netfilter/nf_conntrack_extend.h in the netfilter subsystem in the Linux kernel before 3.14.5 uses an insufficiently large data type for certain extension data, which allows local users to cause a denial of se…

CVSS 2.0MEDIUM 4.9 Local No auth Interaction — EPSS 0.00392 Published 2015-05-27 Fixed

TI-2015-02577 CVE-2015-2922 · GHSA-h2xq-wm46-j26f

The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND)…

LOW 22

The ndisc_router_discovery function in net/ipv6/ndisc.c in the Neighbor Discovery (ND) protocol implementation in the IPv6 stack in the Linux kernel before 3.19.6 allows remote attackers to reconfigure a hop-limit settin…

CVSS 2.0LOW 3.3 Adjacent network No auth Interaction — EPSS 0.03006 Published 2015-05-27 Partial fix CWE-17