Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 37

Vulnerabilities 7

• Unscored —
  CVE-2013-4483

  The ipc_rcu_putref function in ipc/util.c in the Linux kernel before 3.10 does not properly manage a reference count, w…

  linux Debian
  Nov 4, 2013
• Unscored —
  CVE-2014-3185

  Multiple buffer overflows in the command_port_read_callback function in drivers/usb/serial/whiteheat.c in the Whiteheat…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu Azure Linux
  Sep 28, 2014
• Unscored —
  CVE-2014-3611

  Race condition in the __kvm_migrate_pit_timer function in arch/x86/kvm/i8254.c in the KVM subsystem in the Linux kernel…

  linux linux Debian Ubuntu
  Nov 10, 2014
• Unscored —
  CVE-2014-3645

  arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.12 does not have an exit handler for the INVEPT in…

  linux Debian
  Nov 10, 2014
• Unscored —
  CVE-2014-3646

  arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel through 3.17.2 does not have an exit handler for the INVVPI…

  linux linux Debian Ubuntu
  Nov 10, 2014
• Unscored —
  CVE-2014-7841

  The sctp_process_param function in net/sctp/sm_make_chunk.c in the SCTP implementation in the Linux kernel before 3.17.…

  linux linux linux-lts-utopic Debian Ubuntu
  Nov 30, 2014
• Unscored —
  CVE-2014-8160

  net/netfilter/nf_conntrack_proto_generic.c in the Linux kernel before 3.18 generates incorrect conntrack entries during…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 2, 2015

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1024854
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1141400
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1144825
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1144835
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1144878
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1163087
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1182059
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0284.json
• report
  https://access.redhat.com/security/cve/CVE-2013-4483
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-4483
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-4483
• report
  https://access.redhat.com/security/cve/CVE-2014-3185
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3185
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3185
• report
  https://access.redhat.com/security/cve/CVE-2014-3611
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3611
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3611
• report
  https://access.redhat.com/security/cve/CVE-2014-3645
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3645
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3645
• report
  https://access.redhat.com/security/cve/CVE-2014-3646
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3646
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3646
• report
  https://access.redhat.com/security/cve/CVE-2014-7841
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-7841
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-7841
• report
  https://access.redhat.com/security/cve/CVE-2014-8160
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-8160
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-8160