Skip to content
OpenAdvisories
High 1 exploited CVE RHSA-2014:0913 10 CVEs

Red Hat Security Advisory: kernel-rt security update

Published Sep 13, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 15

ReleasePackageFixed in
Red Hat · MRG 2 enterprise_mrg:2:server:el6 kernel-rt 0:3.10.33-rt32.43.el6rt
Red Hat · MRG 2 enterprise_mrg:2:server:el6 kernel-rt-debug 0:3.10.33-rt32.43.el6rt
Red Hat · MRG 2 enterprise_mrg:2:server:el6 kernel-rt-debug-debuginfo 0:3.10.33-rt32.43.el6rt
Red Hat · MRG 2 enterprise_mrg:2:server:el6 kernel-rt-debug-devel 0:3.10.33-rt32.43.el6rt
Red Hat · MRG 2 enterprise_mrg:2:server:el6 kernel-rt-debuginfo 0:3.10.33-rt32.43.el6rt
Red Hat · MRG 2 enterprise_mrg:2:server:el6 kernel-rt-debuginfo-common-x86_64 0:3.10.33-rt32.43.el6rt
Red Hat · MRG 2 enterprise_mrg:2:server:el6 kernel-rt-devel 0:3.10.33-rt32.43.el6rt
Red Hat · MRG 2 enterprise_mrg:2:server:el6 kernel-rt-doc 0:3.10.33-rt32.43.el6rt
Red Hat · MRG 2 enterprise_mrg:2:server:el6 kernel-rt-firmware 0:3.10.33-rt32.43.el6rt
Red Hat · MRG 2 enterprise_mrg:2:server:el6 kernel-rt-trace 0:3.10.33-rt32.43.el6rt
Red Hat · MRG 2 enterprise_mrg:2:server:el6 kernel-rt-trace-debuginfo 0:3.10.33-rt32.43.el6rt
Red Hat · MRG 2 enterprise_mrg:2:server:el6 kernel-rt-trace-devel 0:3.10.33-rt32.43.el6rt
Red Hat · MRG 2 enterprise_mrg:2:server:el6 kernel-rt-vanilla 0:3.10.33-rt32.43.el6rt
Red Hat · MRG 2 enterprise_mrg:2:server:el6 kernel-rt-vanilla-debuginfo 0:3.10.33-rt32.43.el6rt
Red Hat · MRG 2 enterprise_mrg:2:server:el6 kernel-rt-vanilla-devel 0:3.10.33-rt32.43.el6rt

Vulnerabilities 10

  • High 7.8
    CVE-2014-3153 Exploited Public exploit EPSS 37%

    The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two dif…

    linux linux Debian Ubuntu
    KEV May 25, 2022
  • Unscored —
    CVE-2014-0181

    The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket opera…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Unscored —
    CVE-2014-0206

    Array index error in the aio_read_events_ring function in fs/aio.c in the Linux kernel through 3.15.1 allows local user…

    linux linux Debian Ubuntu
  • Unscored —
    CVE-2014-3144

    The (1) BPF_S_ANC_NLATTR and (2) BPF_S_ANC_NLATTR_NEST extension implementations in the sk_run_filter function in net/c…

    linux linux Debian Ubuntu
  • Unscored —
    CVE-2014-3145

    The BPF_S_ANC_NLATTR_NEST extension implementation in the sk_run_filter function in net/core/filter.c in the Linux kern…

    linux linux Debian Ubuntu
  • Unscored —
    CVE-2014-3917

    kernel/auditsc.c in the Linux kernel through 3.14.5, when CONFIG_AUDITSYSCALL is enabled with certain syscall rules, al…

    linux linux Debian Ubuntu
  • Unscored —
    CVE-2014-3940

    The Linux kernel through 3.14.5 does not properly consider the presence of hugetlb entries, which allows local users to…

    linux linux Debian Ubuntu
  • Unscored —
    CVE-2014-4027

    The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly…

    linux linux Debian Ubuntu
  • Unscored —
    CVE-2014-4667

    The sctp_association_free function in net/sctp/associola.c in the Linux kernel before 3.15.2 does not properly manage a…

    linux linux Debian Ubuntu
  • Unscored —
    CVE-2014-4699 Public exploit

    The Linux kernel before 3.15.4 on Intel processors does not properly restrict use of a non-canonical value for the save…

    linux linux Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1094265
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1094602
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1096775
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1102571
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1103626
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1104097
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1108744
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1113967
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1115927
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0913.json
  • report
    https://access.redhat.com/security/cve/CVE-2014-0181
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0181
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0181
  • report
    https://access.redhat.com/security/cve/CVE-2014-0206
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-0206
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-0206
  • report
    https://access.redhat.com/security/cve/CVE-2014-3144
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3144
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3144
  • report
    https://access.redhat.com/security/cve/CVE-2014-3145
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3145
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3145
  • report
    https://access.redhat.com/security/cve/CVE-2014-3153
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3153
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3153
  • article
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog
  • report
    https://access.redhat.com/security/cve/CVE-2014-3917
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3917
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3917
  • report
    https://access.redhat.com/security/cve/CVE-2014-3940
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-3940
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-3940
  • report
    https://access.redhat.com/security/cve/CVE-2014-4027
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-4027
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-4027
  • report
    https://access.redhat.com/security/cve/CVE-2014-4667
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2014-4667
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2014-4667