Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 16

Vulnerabilities 15

• Unscored —
  CVE-2011-0695

  Race condition in the cm_work_handler function in the InfiniBand driver (drivers/infiniband/core/cma.c) in Linux kernel…

  Mar 15, 2011
• Unscored —
  CVE-2011-0711

  The xfs_fs_geometry function in fs/xfs/xfs_fsops.c in the Linux kernel before 2.6.38-rc6-git3 does not initialize a cer…

  Mar 1, 2011
• Unscored —
  CVE-2011-0726

  The do_task_stat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid che…

  Jul 18, 2011
• Unscored —
  CVE-2011-1010

  Buffer overflow in the mac_partition function in fs/partitions/mac.c in the Linux kernel before 2.6.37.2 allows local u…

  Mar 1, 2011
• Unscored —
  CVE-2011-1013

  Integer signedness error in the drm_modeset_ctl function in (1) drivers/gpu/drm/drm_irq.c in the Direct Rendering Manag…

  May 9, 2011
• Unscored —
  CVE-2011-1019

  The dev_load function in net/core/dev.c in the Linux kernel before 2.6.38 allows local users to bypass an intended CAP_…

  Mar 1, 2013
• Unscored —
  CVE-2011-1078

  The sco_sock_getsockopt_old function in net/bluetooth/sco.c in the Linux kernel before 2.6.39 does not initialize a cer…

  Jun 21, 2012
• Unscored —
  CVE-2011-1079

  The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a cert…

  Jun 21, 2012
• Unscored —
  CVE-2011-1080

  The do_replace function in net/bridge/netfilter/ebtables.c in the Linux kernel before 2.6.39 does not ensure that a cer…

  Jun 21, 2012
• Unscored —
  CVE-2011-1082 Public exploit

  fs/eventpoll.c in the Linux kernel before 2.6.38 places epoll file descriptors within other epoll data structures witho…

  Apr 3, 2011
• Unscored —
  CVE-2011-1093

  The dccp_rcv_state_process function in net/dccp/input.c in the Datagram Congestion Control Protocol (DCCP) implementati…

  Jul 18, 2011
• Unscored —
  CVE-2011-1163

  The osf_partition function in fs/partitions/osf.c in the Linux kernel before 2.6.38 does not properly handle an invalid…

  Apr 10, 2011
• Unscored —
  CVE-2011-1170

  net/ipv4/netfilter/arp_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expecte…

  Jun 22, 2011
• Unscored —
  CVE-2011-1171

  net/ipv4/netfilter/ip_tables.c in the IPv4 implementation in the Linux kernel before 2.6.39 does not place the expected…

  Jun 22, 2011
• Unscored —
  CVE-2011-1172

  net/ipv6/netfilter/ip6_tables.c in the IPv6 implementation in the Linux kernel before 2.6.39 does not place the expecte…

  Jun 22, 2011

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/1.3/html/Technical_Notes/RHSA-2011-0500.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=653648
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=677260
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=679282
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=679925
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=680360
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=681259
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=681260
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=681262
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=681575
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=682954
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=684569
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=688021
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=689321
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=689327
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=689345
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=692665
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0500.json
• report
  https://access.redhat.com/security/cve/CVE-2011-0695
• advisory
  https://www.cve.org/CVERecord?id=CVE-2011-0695
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2011-0695
• report
  https://access.redhat.com/security/cve/CVE-2011-0711
• advisory
  https://www.cve.org/CVERecord?id=CVE-2011-0711
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2011-0711
• report
  https://access.redhat.com/security/cve/CVE-2011-0726
• advisory
  https://www.cve.org/CVERecord?id=CVE-2011-0726
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2011-0726
• report
  https://access.redhat.com/security/cve/CVE-2011-1010
• advisory
  https://www.cve.org/CVERecord?id=CVE-2011-1010
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2011-1010
• report
  https://access.redhat.com/security/cve/CVE-2011-1013
• advisory
  https://www.cve.org/CVERecord?id=CVE-2011-1013
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2011-1013
• report
  https://access.redhat.com/security/cve/CVE-2011-1019
• advisory
  https://www.cve.org/CVERecord?id=CVE-2011-1019
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2011-1019
• report
  https://access.redhat.com/security/cve/CVE-2011-1078
• advisory
  https://www.cve.org/CVERecord?id=CVE-2011-1078