Skip to content
OpenAdvisories
Unscored RHSA-2009:1106 7 CVEs

Red Hat Security Advisory: kernel security and bug fix update

Published Sep 15, 2024 · Updated Jun 28, 2026

Ecosystem: Red Hat

Fixed packages 33

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client kernel 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-debug 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-debug-debuginfo 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-debug-devel 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-debuginfo 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-debuginfo-common 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-devel 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-doc 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-headers 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-PAE 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-PAE-debuginfo 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-PAE-devel 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-xen 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-xen-debuginfo 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::client kernel-xen-devel 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-debug 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-debug-debuginfo 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-debug-devel 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-debuginfo 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-debuginfo-common 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-devel 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-doc 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-headers 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-kdump 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-kdump-debuginfo 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-kdump-devel 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-PAE 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-PAE-debuginfo 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-PAE-devel 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-xen 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-xen-debuginfo 0:2.6.18-128.1.14.el5
Red Hat · RHEL 5 enterprise_linux:5::server kernel-xen-devel 0:2.6.18-128.1.14.el5

Vulnerabilities 7

  • Unscored —
    CVE-2009-1072

    nfsd in the Linux kernel before 2.6.28.9 does not drop the CAP_MKNOD capability before handling a user request in a thr…

  • Unscored —
    CVE-2009-1192

    The (1) agp_generic_alloc_page and (2) agp_generic_alloc_pages functions in drivers/char/agp/generic.c in the agp subsy…

  • Unscored —
    CVE-2009-1439

    Buffer overflow in fs/cifs/connect.c in CIFS in the Linux kernel 2.6.29 and earlier allows remote attackers to cause a …

  • Unscored —
    CVE-2009-1630

    The nfs_permission function in fs/nfs/dir.c in the NFS client implementation in the Linux kernel 2.6.29.3 and earlier, …

  • Unscored —
    CVE-2009-1633

    Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause …

  • Unscored —
    CVE-2009-1758

    The hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2.6.30-rc4, 2.6.18, and …

  • Unscored —
    CVE-2009-3238

    The get_random_int function in drivers/char/random.c in the Linux kernel before 2.6.30 produces insufficiently random n…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=486921
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=486926
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=502916
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=486945
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=491572
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=494275
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=496572
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=497020
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=497322
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=498653
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=499546
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=500120
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=500297
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=500349
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=500945
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=501742
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=501751
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=502837
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1106.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-1072
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1072
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1072
  • report
    https://access.redhat.com/security/cve/CVE-2009-1192
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1192
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1192
  • report
    https://access.redhat.com/security/cve/CVE-2009-1439
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1439
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1439
  • report
    https://access.redhat.com/security/cve/CVE-2009-1630
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1630
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1630
  • report
    https://access.redhat.com/security/cve/CVE-2009-1633
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1633
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1633
  • report
    https://access.redhat.com/security/cve/CVE-2009-1758
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1758
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1758
  • report
    https://access.redhat.com/security/cve/CVE-2009-3238