Red Hat Security AdvisoryRHSA-2015:1778
kernel security and bug fix update
Released 2015-09-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) kernel-3.10.0-229.14.1.el7, kernel-abi-whitelists-3.10.0-229.14.1.el7, kernel-debug-3.10.0-229.14.1.el7 +7
- Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-229.14.1.el7, python-perf-3.10.0-229.14.1.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) kernel-3.10.0-229.14.1.el7, kernel-abi-whitelists-3.10.0-229.14.1.el7, kernel-debug-3.10.0-229.14.1.el7 +7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-229.14.1.el7, python-perf-3.10.0-229.14.1.el7
- Red Hat Enterprise Linux Server (v. 7) kernel-3.10.0-229.14.1.ael7b, kernel-3.10.0-229.14.1.el7, kernel-abi-whitelists-3.10.0-229.14.1.ael7b +20
- Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-229.14.1.ael7b, kernel-tools-libs-devel-3.10.0-229.14.1.ael7b, kernel-tools-libs-devel-3.10.0-229.14.1.el7 +2
- Red Hat Enterprise Linux Workstation (v. 7) kernel-3.10.0-229.14.1.el7, kernel-abi-whitelists-3.10.0-229.14.1.el7, kernel-debug-3.10.0-229.14.1.el7 +7
- Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-229.14.1.el7, python-perf-3.10.0-229.14.1.el7
Fixes 7 records
Priority MEDIUM 43
The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause a denial of service (system hang) via incorrect c…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.061 · Published 2015-08-31 · Fixed CWE-399
Priority LOW 32
The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return values, which allows remote attackers to cause a denial of service (EPOLLET epoll application read…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.06077 · Published 2015-08-31 · Fixed CWE-399
Priority LOW 23
The bpf_int_jit_compile function in arch/x86/net/bpf_jit_comp.c in the Linux kernel before 4.0.6 allows local users to cause a denial of service (system crash) by creating a packet filter and then loading crafted BPF ins…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00451 · Published 2015-08-31 · Fixed CWE-17
Priority LOW 23
Memory leak in the __key_link_end function in security/keys/keyring.c in the Linux kernel before 4.1.4 allows local users to cause a denial of service (memory consumption) via many add_key system calls that refer to exis…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.0048 · Published 2015-08-31 · Fixed CWE-119
Priority LOW 23
The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service (BUG) via a crafted fallocate zero-range request.
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00457 · Published 2015-10-19 · Fixed CWE-17
Priority LOW 22
Race condition in net/sctp/socket.c in the Linux kernel before 4.1.2 allows local users to cause a denial of service (list corruption and panic) via a rapid series of system calls related to sockets, as demonstrated by s…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00343 · Published 2015-08-31 · Fixed CWE-362
Priority LOW 12
The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00557 · Published 2015-01-09 · Partial fix
THREATIST.IORead the docs