Red Hat Security AdvisoryRHSA-2015:1787
kernel-rt security, bug fix, and enhancement update
Released 2015-09-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat MRG Realtime for RHEL 6 Server v.2 kernel-rt-1:3.10.0-229.rt56.161.el6rt, kernel-rt-debug-1:3.10.0-229.rt56.161.el6rt, kernel-rt-debug-devel-1:3.10.0-229.rt56.161.el6rt +7
Fixes 6 records
Priority MEDIUM 43
The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 do not properly consider yielding a processor, which allows remote attackers to cause a denial of service (system hang) via incorrect c…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.061 · Published 2015-08-31 · Fixed CWE-399
Priority LOW 32
The (1) udp_recvmsg and (2) udpv6_recvmsg functions in the Linux kernel before 4.0.6 provide inappropriate -EAGAIN return values, which allows remote attackers to cause a denial of service (EPOLLET epoll application read…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.06077 · Published 2015-08-31 · Fixed CWE-399
Priority LOW 23
Memory leak in the __key_link_end function in security/keys/keyring.c in the Linux kernel before 4.1.4 allows local users to cause a denial of service (memory consumption) via many add_key system calls that refer to exis…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.0048 · Published 2015-08-31 · Fixed CWE-119
Priority LOW 23
The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of service (BUG) via a crafted fallocate zero-range request.
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00457 · Published 2015-10-19 · Fixed CWE-17
Priority LOW 22
Race condition in net/sctp/socket.c in the Linux kernel before 4.1.2 allows local users to cause a denial of service (list corruption and panic) via a rapid series of system calls related to sockets, as demonstrated by s…
CVSS 2.0MEDIUM 4.9· Local · No auth · Interaction — · EPSS 0.00343 · Published 2015-08-31 · Fixed CWE-362
Priority LOW 12
The vdso_addr function in arch/x86/vdso/vma.c in the Linux kernel through 3.18.2 does not properly choose memory locations for the vDSO area, which makes it easier for local users to bypass the ASLR protection mechanism…
CVSS 2.0LOW 2.1· Local · No auth · Interaction — · EPSS 0.00557 · Published 2015-01-09 · Partial fix