RHSA-2014:1392 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 69

Release	Package	Fixed in
Red Hat · RHEL 6 enterprise_linux:6::client	kernel	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-abi-whitelists	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debug	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debug-debuginfo	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debug-devel	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debuginfo	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debuginfo-common-i686	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-debuginfo-common-x86_64	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-devel	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-doc	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-firmware	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::client	kernel-headers	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::client	perf	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::client	perf-debuginfo	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::client	python-perf	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::client	python-perf-debuginfo	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-abi-whitelists	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debug	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debug-debuginfo	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debug-devel	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debuginfo	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-debuginfo-common-x86_64	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-devel	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-doc	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-firmware	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	kernel-headers	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	perf	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	perf-debuginfo	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	python-perf	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::computenode	python-perf-debuginfo	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-abi-whitelists	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-bootwrapper	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debug	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debug-debuginfo	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debug-devel	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo-common-i686	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo-common-ppc64	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo-common-s390x	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-debuginfo-common-x86_64	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-devel	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-doc	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-firmware	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-headers	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-kdump	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-kdump-debuginfo	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	kernel-kdump-devel	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	perf	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	perf-debuginfo	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	python-perf	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::server	python-perf-debuginfo	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-abi-whitelists	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debug	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debug-debuginfo	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debug-devel	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debuginfo	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debuginfo-common-i686	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-debuginfo-common-x86_64	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-devel	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-doc	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-firmware	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	kernel-headers	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	perf	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	perf-debuginfo	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	python-perf	0:2.6.32-504.el6
Red Hat · RHEL 6 enterprise_linux:6::workstation	python-perf-debuginfo	0:2.6.32-504.el6

Vulnerabilities 12

High 7.8

CVE-2013-2596 Exploited Public exploit

Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certai…

linux-raspi2 linux-azure linux-gcp linux Debian Ubuntu

Apr 13, 2013
KEV Sep 15, 2022
High 7.3

CVE-2014-4608

Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompre…

linux linux Debian Ubuntu

Jul 3, 2014
Unscored —

CVE-2012-6689

The netlink_sendmsg function in net/netlink/af_netlink.c in the Linux kernel before 3.5.5 does not validate the dst_pid…

linux Debian

May 2, 2016
Unscored —

CVE-2013-4483

The ipc_rcu_putref function in ipc/util.c in the Linux kernel before 3.10 does not properly manage a reference count, w…

linux Debian

Nov 4, 2013
Unscored —

CVE-2014-0181

The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket opera…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Apr 27, 2014
Unscored —

CVE-2014-3122

The try_to_unmap_cluster function in mm/rmap.c in the Linux kernel before 3.14.3 does not properly consider which pages…

linux linux Debian Ubuntu

May 11, 2014
Unscored —

CVE-2014-3601

The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pag…

linux linux Debian Ubuntu

Sep 1, 2014
Unscored —

CVE-2014-4653

sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not ensure possession of…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jul 3, 2014
Unscored —

CVE-2014-4654

The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.1…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jul 3, 2014
Unscored —

CVE-2014-4655

The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.1…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jul 3, 2014
Unscored —

CVE-2014-5045

The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain refer…

linux linux Debian Ubuntu

Aug 1, 2014
Unscored —

CVE-2014-5077

The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 1, 2014

References

article
https://access.redhat.com/security/updates/classification/#important
article
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.6_Technical_Notes/kernel.html#RHSA-2014-1392
article
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html-single/6.6_Release_Notes/index.html
report
https://bugzilla.redhat.com/show_bug.cgi?id=739866
report
https://bugzilla.redhat.com/show_bug.cgi?id=786463
report
https://bugzilla.redhat.com/show_bug.cgi?id=870011
report
https://bugzilla.redhat.com/show_bug.cgi?id=889471
report
https://bugzilla.redhat.com/show_bug.cgi?id=915862
report
https://bugzilla.redhat.com/show_bug.cgi?id=997651
report
https://bugzilla.redhat.com/show_bug.cgi?id=998024
report
https://bugzilla.redhat.com/show_bug.cgi?id=1010882
report
https://bugzilla.redhat.com/show_bug.cgi?id=1024854
report
https://bugzilla.redhat.com/show_bug.cgi?id=1027480
report
https://bugzilla.redhat.com/show_bug.cgi?id=1030411
report
https://bugzilla.redhat.com/show_bug.cgi?id=1031488
report
https://bugzilla.redhat.com/show_bug.cgi?id=1034490
report
https://bugzilla.redhat.com/show_bug.cgi?id=1036972
report
https://bugzilla.redhat.com/show_bug.cgi?id=1044438
report
https://bugzilla.redhat.com/show_bug.cgi?id=1059496
report
https://bugzilla.redhat.com/show_bug.cgi?id=1063836
report
https://bugzilla.redhat.com/show_bug.cgi?id=1065304
report
https://bugzilla.redhat.com/show_bug.cgi?id=1069028
report
https://bugzilla.redhat.com/show_bug.cgi?id=1072373
report
https://bugzilla.redhat.com/show_bug.cgi?id=1077463
report
https://bugzilla.redhat.com/show_bug.cgi?id=1090423
report
https://bugzilla.redhat.com/show_bug.cgi?id=1093076
report
https://bugzilla.redhat.com/show_bug.cgi?id=1094265
report
https://bugzilla.redhat.com/show_bug.cgi?id=1095627
report
https://bugzilla.redhat.com/show_bug.cgi?id=1100523
report
https://bugzilla.redhat.com/show_bug.cgi?id=1113409
report
https://bugzilla.redhat.com/show_bug.cgi?id=1113445
report
https://bugzilla.redhat.com/show_bug.cgi?id=1113899
report
https://bugzilla.redhat.com/show_bug.cgi?id=1118123
report
https://bugzilla.redhat.com/show_bug.cgi?id=1122472
report
https://bugzilla.redhat.com/show_bug.cgi?id=1122982
report
https://bugzilla.redhat.com/show_bug.cgi?id=1124351
report
https://bugzilla.redhat.com/show_bug.cgi?id=1127231
report
https://bugzilla.redhat.com/show_bug.cgi?id=1131951
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1392.json

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 69

Vulnerabilities 12

Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certai…

Multiple integer overflows in the lzo1x_decompress_safe function in lib/lzo/lzo1x_decompress_safe.c in the LZO decompre…

The netlink_sendmsg function in net/netlink/af_netlink.c in the Linux kernel before 3.5.5 does not validate the dst_pid…

The ipc_rcu_putref function in ipc/util.c in the Linux kernel before 3.10 does not properly manage a reference count, w…

The Netlink implementation in the Linux kernel through 3.14.1 does not provide a mechanism for authorizing socket opera…

The try_to_unmap_cluster function in mm/rmap.c in the Linux kernel before 3.14.3 does not properly consider which pages…

The kvm_iommu_map_pages function in virt/kvm/iommu.c in the Linux kernel through 3.16.1 miscalculates the number of pag…

sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2 does not ensure possession of…

The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.1…

The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.1…

The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain refer…

The sctp_assoc_update function in net/sctp/associola.c in the Linux kernel through 3.15.8, when SCTP authentication is …

References