RHSA-2015:2152 — Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 79

Release	Package	Fixed in
Red Hat · RHEL 7 enterprise_linux:7::client	kernel	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-abi-whitelists	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debug	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debug-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debug-devel	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-debuginfo-common-x86_64	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-devel	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-doc	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-headers	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-tools	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-tools-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-tools-libs	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::client	kernel-tools-libs-devel	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::client	perf	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::client	perf-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::client	python-perf	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::client	python-perf-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-abi-whitelists	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-debug	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-debug-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-debug-devel	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-debuginfo-common-x86_64	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-devel	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-doc	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-headers	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-tools	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-tools-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-tools-libs	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	kernel-tools-libs-devel	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	perf	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	perf-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	python-perf	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::computenode	python-perf-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-abi-whitelists	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-bootwrapper	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debug	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debug-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debug-devel	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo-common-ppc64	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo-common-ppc64le	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo-common-s390x	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-debuginfo-common-x86_64	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-devel	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-doc	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-headers	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-kdump	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-kdump-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-kdump-devel	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-tools	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-tools-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-tools-libs	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	kernel-tools-libs-devel	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	perf	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	perf-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	python-perf	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::server	python-perf-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-abi-whitelists	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debug	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debug-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debug-devel	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-debuginfo-common-x86_64	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-devel	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-doc	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-headers	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-tools	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-tools-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-tools-libs	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	kernel-tools-libs-devel	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	perf	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	perf-debuginfo	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	python-perf	0:3.10.0-327.el7
Red Hat · RHEL 7 enterprise_linux:7::workstation	python-perf-debuginfo	0:3.10.0-327.el7

Vulnerabilities 19

Unscored —

CVE-2010-5313

Race condition in arch/x86/kvm/x86.c in the Linux kernel before 2.6.38 allows L2 guest OS users to cause a denial of se…

linux Debian

Nov 30, 2014
Unscored —

CVE-2013-7421

The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system …

linux linux linux-lts-utopic Debian Ubuntu

Mar 2, 2015
Unscored —

CVE-2014-3647

arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, w…

linux linux Debian Ubuntu

Nov 10, 2014
Unscored —

CVE-2014-7842

Race condition in arch/x86/kvm/x86.c in the Linux kernel before 3.17.4 allows guest OS users to cause a denial of servi…

linux linux linux-lts-utopic Debian Ubuntu

Nov 30, 2014
Unscored —

CVE-2014-8171

The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadloc…

linux Debian

Feb 9, 2018
Unscored —

CVE-2014-9419

The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Dec 26, 2014
Unscored —

CVE-2014-9644

The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system …

linux linux linux-lts-utopic Debian Ubuntu

Mar 2, 2015
Unscored —

CVE-2015-0239

The em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the guest OS lacks SYSENTER …

linux linux linux-lts-utopic Debian Ubuntu

Mar 2, 2015
Unscored —

CVE-2015-2925 Public exploit

The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions insid…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 16, 2015
Unscored —

CVE-2015-3288

mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Oct 16, 2016
Unscored —

CVE-2015-3339

Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain…

linux linux linux-lts-utopic Debian Ubuntu

May 27, 2015
Unscored —

CVE-2015-4170

Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-201312…

linux Debian

May 2, 2016
Unscored —

CVE-2015-5283

The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-in…

linux linux linux-lts-utopic linux-lts-vivid Debian Ubuntu

Oct 19, 2015
Unscored —

CVE-2015-6526

The perf_callchain_user_64 function in arch/powerpc/perf/callchain.c in the Linux kernel before 4.0.2 on ppc64 platform…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Aug 31, 2015
Unscored —

CVE-2015-7553

Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlink_…

Sep 14, 2017
Unscored —

CVE-2015-7613

Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges…

linux linux linux-lts-utopic linux-lts-vivid Debian Ubuntu

Oct 19, 2015
Unscored —

CVE-2015-7837

The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secu…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Sep 19, 2017
Unscored —

CVE-2015-8215

net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU val…

linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu

Nov 16, 2015
Unscored —

CVE-2016-0774

The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux packa…

linux linux Debian Ubuntu

Apr 27, 2016

References

article
https://access.redhat.com/security/updates/classification/#important
article
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html-single/7.2_Release_Notes/index.html
article
https://access.redhat.com/articles/1749293
report
https://bugzilla.redhat.com/show_bug.cgi?id=839466
report
https://bugzilla.redhat.com/show_bug.cgi?id=1033907
report
https://bugzilla.redhat.com/show_bug.cgi?id=1033908
report
https://bugzilla.redhat.com/show_bug.cgi?id=1033910
report
https://bugzilla.redhat.com/show_bug.cgi?id=1033911
report
https://bugzilla.redhat.com/show_bug.cgi?id=1034497
report
https://bugzilla.redhat.com/show_bug.cgi?id=1036792
report
https://bugzilla.redhat.com/show_bug.cgi?id=1064059
report
https://bugzilla.redhat.com/show_bug.cgi?id=1076738
report
https://bugzilla.redhat.com/show_bug.cgi?id=1076769
report
https://bugzilla.redhat.com/show_bug.cgi?id=1144897
report
https://bugzilla.redhat.com/show_bug.cgi?id=1163762
report
https://bugzilla.redhat.com/show_bug.cgi?id=1177260
report
https://bugzilla.redhat.com/show_bug.cgi?id=1182243
report
https://bugzilla.redhat.com/show_bug.cgi?id=1184155
report
https://bugzilla.redhat.com/show_bug.cgi?id=1185469
report
https://bugzilla.redhat.com/show_bug.cgi?id=1186112
report
https://bugzilla.redhat.com/show_bug.cgi?id=1186448
report
https://bugzilla.redhat.com/show_bug.cgi?id=1190546
report
https://bugzilla.redhat.com/show_bug.cgi?id=1191604
report
https://bugzilla.redhat.com/show_bug.cgi?id=1198109
report
https://bugzilla.redhat.com/show_bug.cgi?id=1205258
report
https://bugzilla.redhat.com/show_bug.cgi?id=1206198
report
https://bugzilla.redhat.com/show_bug.cgi?id=1209367
report
https://bugzilla.redhat.com/show_bug.cgi?id=1214030
report
https://bugzilla.redhat.com/show_bug.cgi?id=1218454
report
https://bugzilla.redhat.com/show_bug.cgi?id=1218879
report
https://bugzilla.redhat.com/show_bug.cgi?id=1233284
report
https://bugzilla.redhat.com/show_bug.cgi?id=1243998
report
https://bugzilla.redhat.com/show_bug.cgi?id=1249107
report
https://bugzilla.redhat.com/show_bug.cgi?id=1251331
report
https://bugzilla.redhat.com/show_bug.cgi?id=1257528
report
https://bugzilla.redhat.com/show_bug.cgi?id=1268270
report
https://bugzilla.redhat.com/show_bug.cgi?id=1271759
report
https://bugzilla.redhat.com/show_bug.cgi?id=1272472
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2152.json

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 79

Vulnerabilities 19

Race condition in arch/x86/kvm/x86.c in the Linux kernel before 2.6.38 allows L2 guest OS users to cause a denial of se…

The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system …

arch/x86/kvm/emulate.c in the KVM subsystem in the Linux kernel through 3.17.2 does not properly perform RIP changes, w…

Race condition in arch/x86/kvm/x86.c in the Linux kernel before 3.17.4 allows guest OS users to cause a denial of servi…

The memory resource controller (aka memcg) in the Linux kernel allows local users to cause a denial of service (deadloc…

The __switch_to function in arch/x86/kernel/process_64.c in the Linux kernel through 3.18.1 does not ensure that Thread…

The Crypto API in the Linux kernel before 3.18.5 allows local users to load arbitrary kernel modules via a bind system …

The em_sysenter function in arch/x86/kvm/emulate.c in the Linux kernel before 3.18.5, when the guest OS lacks SYSENTER …

The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions insid…

mm/memory.c in the Linux kernel before 4.1.4 mishandles anonymous pages, which allows local users to gain privileges or…

Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain…

Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-201312…

The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-in…

The perf_callchain_user_64 function in arch/powerpc/perf/callchain.c in the Linux kernel before 4.0.2 on ppc64 platform…

Race condition in the kernel in Red Hat Enterprise Linux 7, kernel-rt and Red Hat Enterprise MRG 2, when the nfnetlink_…

Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges…

The Linux kernel, as used in Red Hat Enterprise Linux 7, kernel-rt, and Enterprise MRG 2 and when booted with UEFI Secu…

net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU val…

The (1) pipe_read and (2) pipe_write implementations in fs/pipe.c in a certain Linux kernel backport in the linux packa…

References