Red Hat Security Advisory: kernel security and bug fix update

Fixed packages 37

Vulnerabilities 7

• High 7.8
  CVE-2013-2596 Exploited Public exploit

  Integer overflow in the fb_mmap function in drivers/video/fbmem.c in the Linux kernel before 3.8.9, as used in a certai…

  linux-raspi2 linux-azure linux-gcp linux Debian Ubuntu
  Apr 13, 2013

  KEV Sep 15, 2022
• Unscored —
  CVE-2014-3690

  arch/x86/kvm/vmx.c in the KVM subsystem in the Linux kernel before 3.17.2 on Intel processors does not ensure that the …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 10, 2014
• Unscored —
  CVE-2014-5471

  Stack consumption vulnerability in the parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel …

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 1, 2014
• Unscored —
  CVE-2014-5472

  The parse_rock_ridge_inode_internal function in fs/isofs/rock.c in the Linux kernel through 3.16.1 allows local users t…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Sep 1, 2014
• Unscored —
  CVE-2014-8159

  The InfiniBand (IB) implementation in the Linux kernel package before 2.6.32-504.12.2 on Red Hat Enterprise Linux (RHEL…

  linux linux linux-lts-utopic Debian Ubuntu
  Mar 16, 2015
• Unscored —
  CVE-2014-8884

  Stack-based buffer overflow in the ttusbdecfe_dvbs_diseqc_send_master_cmd function in drivers/media/usb/ttusb-dec/ttusb…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 30, 2014
• Unscored —
  CVE-2015-1421

  Use-after-free vulnerability in the sctp_assoc_update function in net/sctp/associola.c in the Linux kernel before 3.18.…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Mar 16, 2015

References

• article
  https://access.redhat.com/security/updates/classification/#important
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1034490
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1134099
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1153322
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1164266
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1181166
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1196581
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_0782.json
• report
  https://access.redhat.com/security/cve/CVE-2013-2596
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-2596
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-2596
• article
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• report
  https://access.redhat.com/security/cve/CVE-2014-3690
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-3690
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-3690
• report
  https://access.redhat.com/security/cve/CVE-2014-5471
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-5471
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-5471
• report
  https://access.redhat.com/security/cve/CVE-2014-5472
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-5472
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-5472
• report
  https://access.redhat.com/security/cve/CVE-2014-8159
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-8159
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-8159
• report
  https://access.redhat.com/security/cve/CVE-2014-8884
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-8884
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-8884
• report
  https://access.redhat.com/security/cve/CVE-2015-1421
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-1421
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-1421