Skip to content
OpenAdvisories
Unscored RHSA-2008:0857 10 CVEs

Red Hat Security Advisory: kernel security and bug fix update

Published Sep 13, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 14

ReleasePackageFixed in
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt 0:2.6.24.7-81.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-debug 0:2.6.24.7-81.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-debug-debuginfo 0:2.6.24.7-81.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-debug-devel 0:2.6.24.7-81.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-debuginfo 0:2.6.24.7-81.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-debuginfo-common 0:2.6.24.7-81.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-devel 0:2.6.24.7-81.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-doc 0:2.6.24.7-81.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-trace 0:2.6.24.7-81.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-trace-debuginfo 0:2.6.24.7-81.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-trace-devel 0:2.6.24.7-81.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-vanilla 0:2.6.24.7-81.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-vanilla-debuginfo 0:2.6.24.7-81.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-vanilla-devel 0:2.6.24.7-81.el5rt

Vulnerabilities 10

  • Unscored —
    CVE-2008-3272

    The snd_seq_oss_synth_make_info function in sound/core/seq/oss/seq_oss_synth.c in the sound subsystem in the Linux kern…

  • Unscored —
    CVE-2008-3275

    The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before …

  • Unscored —
    CVE-2008-3276

    Integer overflow in the dccp_setsockopt_change function in net/dccp/proto.c in the Datagram Congestion Control Protocol…

  • Unscored —
    CVE-2008-3526

    Integer overflow in the sctp_setsockopt_auth_key function in net/sctp/socket.c in the Stream Control Transmission Proto…

  • Unscored —
    CVE-2008-3534

    The shmem_delete_inode function in mm/shmem.c in the tmpfs implementation in the Linux kernel before 2.6.26.1 allows lo…

  • Unscored —
    CVE-2008-3535

    Off-by-one error in the iov_iter_advance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local us…

  • Unscored —
    CVE-2008-3792

    net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) implementation in the Linux kernel before 2.6.26.4…

  • Unscored —
    CVE-2008-3915

    Buffer overflow in nfsd in the Linux kernel before 2.6.26.4, when NFSv4 is enabled, allows remote attackers to have an …

  • Unscored —
    CVE-2008-4113 Public exploit

    The sctp_getsockopt_hmac_ident function in net/sctp/socket.c in the Stream Control Transmission Protocol (sctp) impleme…

  • Unscored —
    CVE-2008-4445

    The sctp_auth_ep_set_hmacs function in net/sctp/auth.c in the Stream Control Transmission Protocol (sctp) implementatio…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=447942
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=448574
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=454270
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=457012
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=457014
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=457019
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=457027
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=457507
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=457703
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=457858
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=457995
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=458016
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=458104
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=458340
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=458350
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=458487
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=458755
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=458756
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=458758
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=459141
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=459226
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=459459
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=459462
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=459478
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=459942
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=459955
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=460093
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=460455
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=461101
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=462599
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=464514
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0857.json
  • report
    https://access.redhat.com/security/cve/CVE-2008-3272
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3272
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3272
  • report
    https://access.redhat.com/security/cve/CVE-2008-3275
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3275
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-3275