RHSA-2014:1971 — Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 78

Release	Package	Fixed in
Red Hat · RHEL 7 enterprise_linux:7::client	kernel	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-abi-whitelists	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debug	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debug-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debug-devel	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debuginfo-common-x86_64	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-devel	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-doc	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-headers	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-tools	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-tools-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-tools-libs	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-tools-libs-devel	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	perf	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	perf-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	python-perf	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::client	python-perf-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-abi-whitelists	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-debug	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-debug-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-debug-devel	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-debuginfo-common-x86_64	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-devel	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-doc	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-headers	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-tools	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-tools-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-tools-libs	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-tools-libs-devel	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	perf	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	perf-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	python-perf	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	python-perf-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-abi-whitelists	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-bootwrapper	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debug	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debug-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debug-devel	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo-common-ppc64	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo-common-s390x	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo-common-x86_64	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-devel	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-doc	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-headers	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-kdump	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-kdump-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-kdump-devel	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-tools	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-tools-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-tools-libs	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-tools-libs-devel	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	perf	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	perf-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	python-perf	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::server	python-perf-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-abi-whitelists	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debug	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debug-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debug-devel	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debuginfo-common-x86_64	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-devel	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-doc	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-headers	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-tools	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-tools-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-tools-libs	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-tools-libs-devel	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	perf	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	perf-debuginfo	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	python-perf	0:3.10.0-123.13.1.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	python-perf-debuginfo	0:3.10.0-123.13.1.el7

Vulnerabilities 18

Unscored —

CVE-2013-2929

The Linux kernel before 3.12.2 does not properly use the get_dumpable function, which allows local users to bypass inte…

linux Debian

Dec 9, 2013
Unscored —

CVE-2014-1739 Public exploit

The media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not init…

linux linux Debian Ubuntu

Jun 23, 2014
Unscored —

CVE-2014-3181

Multiple stack-based buffer overflows in the magicmouse_raw_event function in drivers/hid/hid-magicmouse.c in the Magic…

linux linux Debian Ubuntu

Sep 28, 2014
Unscored —

CVE-2014-3182

Array index error in the logi_dj_raw_event function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 28, 2014
Unscored —

CVE-2014-3184

The report_fixup functions in the HID subsystem in the Linux kernel before 3.16.2 might allow physically proximate atta…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 28, 2014
Unscored —

CVE-2014-3185

Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux

Sep 28, 2014
Unscored —

CVE-2014-3186

Buffer overflow in the picolcd_raw_event function in devices/hid/hid-picolcd_core.c in the PicoLCD HID device driver in…

linux linux Debian Ubuntu

Sep 28, 2014
Unscored —

CVE-2014-3631 Public exploit

The assoc_array_gc function in the associative-array implementation in lib/assoc_array.c in the Linux kernel before 3.1…

linux linux Debian Ubuntu

Sep 28, 2014
Unscored —

CVE-2014-3673

The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 10, 2014
Unscored —

CVE-2014-3687

The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel throug…

linux linux linux-lts-utopic Debian Ubuntu

Nov 10, 2014
Unscored —

CVE-2014-3688

The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory …

linux linux linux-lts-utopic Debian Ubuntu

Nov 30, 2014
Unscored —

CVE-2014-4027

The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly…

linux linux Debian Ubuntu

Jun 23, 2014
Unscored —

CVE-2014-4652

Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control.c in the AL…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jul 3, 2014
Unscored —

CVE-2014-4654

The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.1…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jul 3, 2014
Unscored —

CVE-2014-4655

The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.1…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jul 3, 2014
Unscored —

CVE-2014-4656

Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Jul 3, 2014
Unscored —

CVE-2014-5045

The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain refer…

linux linux Debian Ubuntu

Aug 1, 2014
Unscored —

CVE-2014-6410

The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB …

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 28, 2014

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=1028148
report
https://bugzilla.redhat.com/show_bug.cgi?id=1108744
report
https://bugzilla.redhat.com/show_bug.cgi?id=1109774
report
https://bugzilla.redhat.com/show_bug.cgi?id=1113406
report
https://bugzilla.redhat.com/show_bug.cgi?id=1113445
report
https://bugzilla.redhat.com/show_bug.cgi?id=1113470
report
https://bugzilla.redhat.com/show_bug.cgi?id=1122472
report
https://bugzilla.redhat.com/show_bug.cgi?id=1140325
report
https://bugzilla.redhat.com/show_bug.cgi?id=1141173
report
https://bugzilla.redhat.com/show_bug.cgi?id=1141210
report
https://bugzilla.redhat.com/show_bug.cgi?id=1141391
report
https://bugzilla.redhat.com/show_bug.cgi?id=1141400
report
https://bugzilla.redhat.com/show_bug.cgi?id=1141407
report
https://bugzilla.redhat.com/show_bug.cgi?id=1141809
report
https://bugzilla.redhat.com/show_bug.cgi?id=1147850
report
https://bugzilla.redhat.com/show_bug.cgi?id=1155731
report
https://bugzilla.redhat.com/show_bug.cgi?id=1155745
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_1971.json
report
https://access.redhat.com/security/cve/CVE-2013-2929
advisory
https://www.cve.org/CVERecord?id=CVE-2013-2929
advisory
https://nvd.nist.gov/vuln/detail/CVE-2013-2929
report
https://access.redhat.com/security/cve/CVE-2014-1739
advisory
https://www.cve.org/CVERecord?id=CVE-2014-1739
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-1739
report
https://access.redhat.com/security/cve/CVE-2014-3181
advisory
https://www.cve.org/CVERecord?id=CVE-2014-3181
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-3181
report
https://access.redhat.com/security/cve/CVE-2014-3182
advisory
https://www.cve.org/CVERecord?id=CVE-2014-3182
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-3182
report
https://access.redhat.com/security/cve/CVE-2014-3184
advisory
https://www.cve.org/CVERecord?id=CVE-2014-3184
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-3184
report
https://access.redhat.com/security/cve/CVE-2014-3185
advisory
https://www.cve.org/CVERecord?id=CVE-2014-3185
advisory
https://nvd.nist.gov/vuln/detail/CVE-2014-3185
report
https://access.redhat.com/security/cve/CVE-2014-3186
advisory
https://www.cve.org/CVERecord?id=CVE-2014-3186

Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 78

Vulnerabilities 18

The Linux kernel before 3.12.2 does not properly use the get_dumpable function, which allows local users to bypass inte…

The media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not init…

Multiple stack-based buffer overflows in the magicmouse_raw_event function in drivers/hid/hid-magicmouse.c in the Magic…

Array index error in the logi_dj_raw_event function in drivers/hid/hid-logitech-dj.c in the Linux kernel before 3.16.2 …

The report_fixup functions in the HID subsystem in the Linux kernel before 3.16.2 might allow physically proximate atta…

Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat…

Buffer overflow in the picolcd_raw_event function in devices/hid/hid-picolcd_core.c in the PicoLCD HID device driver in…

The assoc_array_gc function in the associative-array implementation in lib/assoc_array.c in the Linux kernel before 3.1…

The SCTP implementation in the Linux kernel through 3.17.2 allows remote attackers to cause a denial of service (system…

The sctp_assoc_lookup_asconf_ack function in net/sctp/associola.c in the SCTP implementation in the Linux kernel throug…

The SCTP implementation in the Linux kernel before 3.17.4 allows remote attackers to cause a denial of service (memory …

The rd_build_device_space function in drivers/target/target_core_rd.c in the Linux kernel before 3.14 does not properly…

Race condition in the tlv handler functionality in the snd_ctl_elem_user_tlv function in sound/core/control.c in the AL…

The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.1…

The snd_ctl_elem_add function in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.1…

Multiple integer overflows in sound/core/control.c in the ALSA control implementation in the Linux kernel before 3.15.2…

The mountpoint_last function in fs/namei.c in the Linux kernel before 3.15.8 does not properly maintain a certain refer…

The __udf_read_inode function in fs/udf/inode.c in the Linux kernel through 3.16.3 does not restrict the amount of ICB …

References