Red Hat Security Advisory: kernel-rt security and bug fix update

Fixed packages 15

Vulnerabilities 33

• Unscored —
  CVE-2010-4243 Public exploit

  fs/exec.c in the Linux kernel before 2.6.37 does not enable the OOM Killer to assess use of stack memory by arrays repr…

  Jan 22, 2011
• Unscored —
  CVE-2010-4526

  Race condition in the sctp_icmp_proto_unreachable function in net/sctp/input.c in Linux kernel 2.6.11-rc2 through 2.6.3…

  Jan 11, 2011
• Unscored —
  CVE-2011-1020 Public exploit

  The proc filesystem implementation in the Linux kernel 2.6.37 and earlier does not restrict access to the /proc directo…

  Feb 28, 2011
• Unscored —
  CVE-2011-1021 Public exploit

  drivers/acpi/debugfs.c in the Linux kernel before 3.0 allows local users to modify arbitrary kernel memory locations by…

  Jun 21, 2012
• Unscored —
  CVE-2011-1090

  The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory…

  May 9, 2011
• Unscored —
  CVE-2011-1160

  The tpm_open function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer,…

  Jun 21, 2012
• Unscored —
  CVE-2011-1478

  The napi_reuse_skb function in net/core/dev.c in the Generic Receive Offload (GRO) implementation in the Linux kernel b…

  Oct 23, 2011
• Unscored —
  CVE-2011-1479 Public exploit

  Double free vulnerability in the inotify subsystem in the Linux kernel before 2.6.39 allows local users to cause a deni…

  Jun 21, 2012
• Unscored —
  CVE-2011-1494

  Integer overflow in the _ctl_do_mpt_command function in drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 a…

  May 3, 2011
• Unscored —
  CVE-2011-1495

  drivers/scsi/mpt2sas/mpt2sas_ctl.c in the Linux kernel 2.6.38 and earlier does not validate (1) length and (2) offset v…

  May 3, 2011
• Unscored —
  CVE-2011-1576

  The Generic Receive Offload (GRO) implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux 5 and 2.6.32 on…

  Aug 31, 2011
• Unscored —
  CVE-2011-1577

  Heap-based buffer overflow in the is_gpt_valid function in fs/partitions/efi.c in the Linux kernel 2.6.38 and earlier a…

  May 3, 2011
• Unscored —
  CVE-2011-1585

  The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the a…

  Jun 8, 2013
• Unscored —
  CVE-2011-1593

  Multiple integer overflows in the next_pidmap function in kernel/pid.c in the Linux kernel before 2.6.38.4 allow local …

  May 3, 2011
• Unscored —
  CVE-2011-1598

  The bcm_release function in net/can/bcm.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket dat…

  May 9, 2011
• Unscored —
  CVE-2011-1745

  Integer overflow in the agp_generic_insert_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6…

  May 9, 2011
• Unscored —
  CVE-2011-1746

  Multiple integer overflows in the (1) agp_allocate_memory and (2) agp_create_user_memory functions in drivers/char/agp/…

  May 9, 2011
• Unscored —
  CVE-2011-1748

  The raw_release function in net/can/raw.c in the Linux kernel before 2.6.39-rc6 does not properly validate a socket dat…

  May 9, 2011
• Unscored —
  CVE-2011-1767

  net/ipv4/ip_gre.c in the Linux kernel before 2.6.34, when ip_gre is configured as a module, allows remote attackers to …

  Jun 13, 2012
• Unscored —
  CVE-2011-1768

  The tunnels implementation in the Linux kernel before 2.6.34, when tunnel functionality is configured as a module, allo…

  Jun 13, 2012
• Unscored —
  CVE-2011-1770

  Integer underflow in the dccp_parse_options function (net/dccp/options.c) in the Linux kernel before 2.6.33.14 allows r…

  Jun 24, 2011
• Unscored —
  CVE-2011-1776

  The is_gpt_valid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extens…

  Sep 6, 2011
• Unscored —
  CVE-2011-2022

  The agp_generic_remove_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 does not valid…

  May 9, 2011
• Unscored —
  CVE-2011-2183 Public exploit

  Race condition in the scan_get_next_rmap_item function in mm/ksm.c in the Linux kernel before 2.6.39.3, when Kernel Sam…

  Jun 13, 2012
• Unscored —
  CVE-2011-2213

  The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INE…

  Aug 29, 2011
• Unscored —
  CVE-2011-2484

  The add_del_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple …

  Jun 24, 2011
• Unscored —
  CVE-2011-2491

  The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3.0 a…

  Mar 1, 2013
• Unscored —
  CVE-2011-2492

  The bluetooth subsystem in the Linux kernel before 3.0-rc4 does not properly initialize certain data structures, which …

  Jul 28, 2011
• Unscored —
  CVE-2011-2495

  fs/proc/base.c in the Linux kernel before 2.6.39.4 does not properly restrict access to /proc/#####/io files, which all…

  Jun 13, 2012
• Unscored —
  CVE-2011-2496

  Integer overflow in the vma_to_resize function in mm/mremap.c in the Linux kernel before 2.6.39 allows local users to c…

  Jun 13, 2012
• Unscored —
  CVE-2011-2497

  Integer underflow in the l2cap_config_req function in net/bluetooth/l2cap_core.c in the Linux kernel before 3.0 allows …

  Aug 29, 2011
• Unscored —
  CVE-2011-2517

  Multiple buffer overflows in net/wireless/nl80211.c in the Linux kernel before 2.6.39.2 allow local users to gain privi…

  May 24, 2012
• Unscored —
  CVE-2011-2695

  Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to cause a denial…

  Jul 28, 2011

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_MRG/2.0/html/Technical_Notes/index.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=625688
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=664914
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=680358
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=680841
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=681987
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=682641
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=684671
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=691270
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=691793
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=694021
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=695173
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=695976
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=697394
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=697822
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=698057
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=698996
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=698998
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=702303
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=703011
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=703019
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=703026
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=709393
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=710158
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=710338
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=714536
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=715436
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=716538
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=716805
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=716825
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=718152
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=722557
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=728310
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=728551
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1253.json
• report
  https://access.redhat.com/security/cve/CVE-2010-4243
• advisory
  https://www.cve.org/CVERecord?id=CVE-2010-4243
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2010-4243