Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Fixed packages 70

Vulnerabilities 10

• Unscored —
  CVE-2010-5313

  Race condition in arch/x86/kvm/x86.c in the Linux kernel before 2.6.38 allows L2 guest OS users to cause a denial of se…

  linux Debian
  Nov 30, 2014
• Unscored —
  CVE-2013-4312

  The Linux kernel before 4.4.1 allows local users to bypass file-descriptor limits and cause a denial of service (memory…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Feb 8, 2016
• Unscored —
  CVE-2014-7842

  Race condition in arch/x86/kvm/x86.c in the Linux kernel before 3.17.4 allows guest OS users to cause a denial of servi…

  linux linux linux-lts-utopic Debian Ubuntu
  Nov 30, 2014
• Unscored —
  CVE-2014-8134

  The paravirt_ops_setup function in arch/x86/kernel/kvm.c in the Linux kernel through 3.18 uses an improper paravirt_ena…

  linux linux linux-lts-utopic Debian Ubuntu
  Dec 12, 2014
• Unscored —
  CVE-2015-5156

  The virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel before 4.2 attempts to support a FRAGLIST fe…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Oct 19, 2015
• Unscored —
  CVE-2015-7509

  fs/ext4/namei.c in the Linux kernel before 3.7 allows physically proximate attackers to cause a denial of service (syst…

  linux Debian
  Dec 28, 2015
• Unscored —
  CVE-2015-8215

  net/ipv6/addrconf.c in the IPv6 stack in the Linux kernel before 4.0 does not validate attempted changes to the MTU val…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 16, 2015
• Unscored —
  CVE-2015-8324

  The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data st…

  linux Debian
  May 2, 2016
• Unscored —
  CVE-2015-8543 Public exploit

  The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not valida…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Dec 28, 2015
• Unscored —
  CVE-2016-3841

  The IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users to gain privileges or…

  linux linux linux-lts-utopic linux-lts-vivid Debian Ubuntu
  Aug 6, 2016

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• article
  https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.8_Release_Notes/index.html
• article
  https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.8_Technical_Notes/index.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=697750
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=723722
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=889368
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1066751
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1163762
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1172765
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1197875
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1225359
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1242239
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1243852
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1248507
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1254020
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1259222
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1259870
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1267261
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1283253
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1290475
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1297813
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1310661
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_0855.json
• report
  https://access.redhat.com/security/cve/CVE-2010-5313
• advisory
  https://www.cve.org/CVERecord?id=CVE-2010-5313
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2010-5313
• report
  https://access.redhat.com/security/cve/CVE-2013-4312
• advisory
  https://www.cve.org/CVERecord?id=CVE-2013-4312
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2013-4312
• report
  https://access.redhat.com/security/cve/CVE-2014-7842
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-7842
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-7842
• report
  https://access.redhat.com/security/cve/CVE-2014-8134
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-8134
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-8134
• report
  https://access.redhat.com/security/cve/CVE-2015-5156
• advisory
  https://www.cve.org/CVERecord?id=CVE-2015-5156
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2015-5156
• report
  https://access.redhat.com/security/cve/CVE-2015-7509