Skip to content
OpenAdvisories
Unscored RHSA-2009:1540 12 CVEs

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Published Sep 13, 2024 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 14

ReleasePackageFixed in
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt 0:2.6.24.7-137.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-debug 0:2.6.24.7-137.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-debug-debuginfo 0:2.6.24.7-137.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-debug-devel 0:2.6.24.7-137.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-debuginfo 0:2.6.24.7-137.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-debuginfo-common 0:2.6.24.7-137.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-devel 0:2.6.24.7-137.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-doc 0:2.6.24.7-137.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-trace 0:2.6.24.7-137.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-trace-debuginfo 0:2.6.24.7-137.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-trace-devel 0:2.6.24.7-137.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-vanilla 0:2.6.24.7-137.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-vanilla-debuginfo 0:2.6.24.7-137.el5rt
Red Hat · MRG 1 enterprise_mrg:1::el5 kernel-rt-vanilla-devel 0:2.6.24.7-137.el5rt

Vulnerabilities 12

  • Unscored —
    CVE-2009-1895

    The personality subsystem in the Linux kernel before 2.6.31-rc3 has a PER_CLEAR_ON_SETID setting that does not clear th…

  • Unscored —
    CVE-2009-2691

    The mm_for_maps function in fs/proc/base.c in the Linux kernel 2.6.30.4 and earlier allows local users to read (1) maps…

  • Unscored —
    CVE-2009-2695

    The Linux kernel before 2.6.31-rc7 does not properly prevent mmap operations that target page zero and other low memory…

  • Unscored —
    CVE-2009-2849

    The md driver (drivers/md/md.c) in the Linux kernel before 2.6.30.2 might allow local users to cause a denial of servic…

  • Unscored —
    CVE-2009-2910

    arch/x86/ia32/ia32entry.S in the Linux kernel before 2.6.31.4 on the x86_64 platform does not clear certain kernel regi…

  • Unscored —
    CVE-2009-3002 Public exploit

    The Linux kernel before 2.6.31-rc7 does not initialize certain data structures within getname functions, which allows l…

  • Unscored —
    CVE-2009-3228

    The tc_fill_tclass function in net/sched/sch_api.c in the tc subsystem in the Linux kernel 2.4.x before 2.4.37.6 and 2.…

  • Unscored —
    CVE-2009-3547 Public exploit

    Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of serv…

  • Unscored —
    CVE-2009-3612

    The tcf_fill_node function in net/sched/cls_api.c in the netlink subsystem in the Linux kernel 2.6.x before 2.6.32-rc5,…

  • Unscored —
    CVE-2009-3613 Public exploit EPSS 12%

    The swiotlb functionality in the r8169 driver in drivers/net/r8169.c in the Linux kernel before 2.6.27.22 allows remote…

  • Unscored —
    CVE-2009-3620

    The ATI Rage 128 (aka r128) driver in the Linux kernel before 2.6.31-git11 does not properly verify Concurrent Command …

  • Unscored —
    CVE-2009-3621 Public exploit

    net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system han…

References

  • article
    http://www.redhat.com/security/updates/classification/#important
  • article
    http://kbase.redhat.com/faq/docs/DOC-18042
  • article
    http://kbase.redhat.com/faq/docs/DOC-17866
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=529597
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=529626
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=530490
  • article
    http://www.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=511171
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=516171
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=517830
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=518132
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=518160
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=519305
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=520990
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=521999
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=522359
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=522501
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=522503
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=523986
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=526788
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=528139
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=528868
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=529137
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2009/rhsa-2009_1540.json
  • report
    https://access.redhat.com/security/cve/CVE-2009-1895
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-1895
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-1895
  • report
    https://access.redhat.com/security/cve/CVE-2009-2691
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2691
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2691
  • report
    https://access.redhat.com/security/cve/CVE-2009-2695
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2695
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2695
  • report
    https://access.redhat.com/security/cve/CVE-2009-2849
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2849
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2849
  • report
    https://access.redhat.com/security/cve/CVE-2009-2910
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2009-2910
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2009-2910