Skip to content
OpenAdvisories
Unscored RHSA-2008:0957 8 CVEs

Red Hat Security Advisory: kernel security and bug fix update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 33

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client kernel 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-debug 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-debug-debuginfo 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-debug-devel 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-debuginfo 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-debuginfo-common 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-devel 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-doc 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-headers 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-PAE 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-PAE-debuginfo 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-PAE-devel 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-xen 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-xen-debuginfo 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-xen-devel 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-debug 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-debug-debuginfo 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-debug-devel 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-debuginfo 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-debuginfo-common 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-devel 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-doc 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-headers 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-kdump 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-kdump-debuginfo 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-kdump-devel 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-PAE 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-PAE-debuginfo 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-PAE-devel 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-xen 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-xen-debuginfo 0:2.6.18-92.1.18.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-xen-devel 0:2.6.18-92.1.18.el5

Vulnerabilities 8

  • Unscored —
    CVE-2006-5755

    Linux kernel before 2.6.18, when running on x86_64 systems, does not properly save or restore EFLAGS during a context s…

  • Unscored —
    CVE-2007-5907

    Xen 3.1.1 does not prevent modification of the CR4 TSC from applications, which allows pv guests to cause a denial of s…

  • Unscored —
    CVE-2008-2372

    The Linux kernel 2.6.24 and 2.6.25 before 2.6.25.9 allows local users to cause a denial of service (memory consumption)…

  • Unscored —
    CVE-2008-3276

    Integer overflow in the dccp_setsockopt_change function in net/dccp/proto.c in the Datagram Congestion Control Protocol…

  • Unscored —
    CVE-2008-3527

    arch/i386/kernel/sysenter.c in the Virtual Dynamic Shared Objects (vDSO) implementation in the Linux kernel before 2.6.…

  • Unscored —
    CVE-2008-3833

    The generic_file_splice_write function in fs/splice.c in the Linux kernel before 2.6.19 does not properly strip setuid …

  • Unscored —
    CVE-2008-4210 Public exploit

    fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a f…

  • Unscored —
    CVE-2008-4302 Public exploit

    fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the add_t…

References

  • article
    http://www.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=458021
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=458759
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=458781
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=459226
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=459461
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=459464
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=460251
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=377561
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=452666
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=457718
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=460638
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=460858
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=460868
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=461099
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=461457
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=461894
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=462434
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=462591
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=462860
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=463661
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=464450
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=465741
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=466427
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=466885
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=467105
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=470040
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0957.json
  • report
    https://access.redhat.com/security/cve/CVE-2006-5755
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-5755
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-5755
  • report
    https://access.redhat.com/security/cve/CVE-2007-5907
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2007-5907
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2007-5907
  • report
    https://access.redhat.com/security/cve/CVE-2008-2372
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-2372
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2008-2372
  • report
    https://access.redhat.com/security/cve/CVE-2008-3276
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2008-3276