RHSA-2008:0857High

Red Hat Security Advisory: kernel security and bug fix update

Published
October 7, 2008
Last Modified
November 21, 2025

🔗 CVE IDs covered (10)

CVE-2008-3272 →CVE-2008-3275 →CVE-2008-3276 →CVE-2008-3526 →CVE-2008-3534 →CVE-2008-3535 →CVE-2008-3792 →CVE-2008-3915 →CVE-2008-4113 →CVE-2008-4445 →

📋 Description

CVE-2008-3272 — kernel snd_seq_oss_synth_make_info leak CVE-2008-3275 — Linux kernel local filesystem DoS CVE-2008-3276 — Linux kernel dccp_setsockopt_change() integer overflow CVE-2008-3526 — Linux kernel sctp_setsockopt_auth_key() integer overflow CVE-2008-3534 — kernel: tmpfs: fix kernel BUG in shmem_delete_inode CVE-2008-3535 — kernel: fix off-by-one error in iov_iter_advance() CVE-2008-3792 — kernel: sctp: fix potential panics in the SCTP-AUTH API CVE-2008-3915 — kernel: nfsd: fix buffer overrun decoding NFSv4 acl CVE-2008-4113 — kernel: sctp_getsockopt_hmac_ident information disclosure CVE-2008-4445 — kernel: sctp: fix random memory dereference with SCTP_HMAC_IDENT option

🎯 Affected products29

  • MRG Realtime for RHEL 5 Server
  • kernel-rt-0:2.6.24.7-81.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-0:2.6.24.7-81.el5rt.src as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-0:2.6.24.7-81.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debug-0:2.6.24.7-81.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debug-0:2.6.24.7-81.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debug-debuginfo-0:2.6.24.7-81.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debug-debuginfo-0:2.6.24.7-81.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debug-devel-0:2.6.24.7-81.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debug-devel-0:2.6.24.7-81.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debuginfo-0:2.6.24.7-81.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debuginfo-0:2.6.24.7-81.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debuginfo-common-0:2.6.24.7-81.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debuginfo-common-0:2.6.24.7-81.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-devel-0:2.6.24.7-81.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-devel-0:2.6.24.7-81.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-doc-0:2.6.24.7-81.el5rt.noarch as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-trace-0:2.6.24.7-81.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-trace-0:2.6.24.7-81.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-trace-debuginfo-0:2.6.24.7-81.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-trace-debuginfo-0:2.6.24.7-81.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-trace-devel-0:2.6.24.7-81.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-trace-devel-0:2.6.24.7-81.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-vanilla-0:2.6.24.7-81.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-vanilla-0:2.6.24.7-81.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-vanilla-debuginfo-0:2.6.24.7-81.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-vanilla-debuginfo-0:2.6.24.7-81.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-vanilla-devel-0:2.6.24.7-81.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-vanilla-devel-0:2.6.24.7-81.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server

✅ Remediation

Before applying this update, make sure that all previously-released errata relevant to your system have been applied. This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/FAQ_58_10188

🔗 References (34)