Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 65

Vulnerabilities 16

• Medium 5.5
  CVE-2014-0196 Exploited Public exploit EPSS 20%

  The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver …

  linux linux Debian Ubuntu
  May 7, 2014

  KEV May 12, 2023
• Unscored —
  CVE-2012-6537

  net/xfrm/xfrm_user.c in the Linux kernel before 3.6 does not initialize certain structures, which allows local users to…

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2012-6538

  The copy_to_user_auth function in net/xfrm/xfrm_user.c in the Linux kernel before 3.6 uses an incorrect C library funct…

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2012-6546

  The ATM implementation in the Linux kernel before 3.6 does not initialize certain structures, which allows local users …

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2012-6547

  The __tun_chr_ioctl function in drivers/net/tun.c in the Linux kernel before 3.6 does not initialize a certain structur…

  linux Debian
  Mar 14, 2013
• Unscored —
  CVE-2013-0349

  The hidp_setup_hid function in net/bluetooth/hidp/core.c in the Linux kernel before 3.7.6 does not properly copy a cert…

  linux Debian
  Feb 28, 2013
• Unscored —
  CVE-2013-0913

  Integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM)…

  linux Debian
  Mar 18, 2013
• Unscored —
  CVE-2013-1767

  Use-after-free vulnerability in the shmem_remount_fs function in mm/shmem.c in the Linux kernel before 3.7.10 allows lo…

  linux Debian
  Feb 28, 2013
• Unscored —
  CVE-2013-1773 Public exploit

  Buffer overflow in the VFAT filesystem implementation in the Linux kernel before 3.3 allows local users to gain privile…

  linux Debian
  Feb 28, 2013
• Unscored —
  CVE-2013-1774

  The chase_port function in drivers/usb/serial/io_ti.c in the Linux kernel before 3.7.4 allows local users to cause a de…

  linux Debian
  Feb 28, 2013
• Unscored —
  CVE-2013-1792

  Race condition in the install_user_keyrings function in security/keys/process_keys.c in the Linux kernel before 3.8.3 a…

  linux Debian
  Mar 22, 2013
• Unscored —
  CVE-2013-1796

  The kvm_set_msr_common function in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 does not ensure a required time…

  linux Debian
  Mar 22, 2013
• Unscored —
  CVE-2013-1797

  Use-after-free vulnerability in arch/x86/kvm/x86.c in the Linux kernel through 3.8.4 allows guest OS users to cause a d…

  linux Debian
  Mar 22, 2013
• Unscored —
  CVE-2013-1798

  The ioapic_read_indirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a cer…

  linux Debian
  Mar 22, 2013
• Unscored —
  CVE-2013-1826

  The xfrm_state_netlink function in net/xfrm/xfrm_user.c in the Linux kernel before 3.5.7 does not properly handle error…

  linux Debian
  Mar 22, 2013
• Unscored —
  CVE-2013-1827

  net/dccp/ccid.h in the Linux kernel before 3.5.4 allows local users to gain privileges or cause a denial of service (NU…

  linux Debian
  Mar 22, 2013

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.4_Technical_Notes/kernel.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=914298
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=915592
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=916115
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=916191
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=916646
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=917012
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=917013
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=917017
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=919164
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=919384
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=920471
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=922344
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=922383
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=922424
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0744.json
• report
  https://access.redhat.com/security/cve/CVE-2012-6537
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-6537
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-6537
• report
  https://access.redhat.com/security/cve/CVE-2012-6538
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=922253
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-6538
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-6538
• report
  https://access.redhat.com/security/cve/CVE-2012-6546
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-6546
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-6546
• report
  https://access.redhat.com/security/cve/CVE-2012-6547
• advisory
  https://www.cve.org/CVERecord?id=CVE-2012-6547
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2012-6547
• report
  https://access.redhat.com/security/cve/CVE-2013-0349
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-0349
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-0349
• report
  https://access.redhat.com/security/cve/CVE-2013-0913
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-0913
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-0913
• report
  https://access.redhat.com/security/cve/CVE-2013-1767
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-1767
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-1767