RHSA-2011:0330High

Red Hat Security Advisory: kernel-rt security and bug fix update

Published
March 10, 2011
Last Modified
November 7, 2026

🔗 CVE IDs covered (19)

CVE-2010-3477 →CVE-2010-4160 →CVE-2010-4162 →CVE-2010-4163 →CVE-2010-4165 →CVE-2010-4242 →CVE-2010-4248 →CVE-2010-4249 →CVE-2010-4250 →CVE-2010-4346 →CVE-2010-4347 →CVE-2010-4565 →CVE-2010-4648 →CVE-2010-4649 →CVE-2010-4655 →CVE-2010-4656 →CVE-2010-4668 →CVE-2011-0521 →CVE-2011-1044 →

📋 Description

CVE-2010-3477 — kernel: net/sched/act_police.c infoleak CVE-2010-4160 — kernel: L2TP send buffer allocation size overflows CVE-2010-4162 — kernel: bio: integer overflow page count when mapping/copying user data CVE-2010-4163 — kernel: panic when submitting certain 0-length I/O requests CVE-2010-4165 — kernel: possible kernel oops from user MSS CVE-2010-4242 — kernel: missing tty ops write function presence check in hci_uart_tty_open() CVE-2010-4248 — kernel: posix-cpu-timers: workaround to suppress the problems with mt exec CVE-2010-4249 — kernel: unix socket local dos CVE-2010-4250 — kernel: inotify memory leak CVE-2010-4346 — kernel: install_special_mapping skips security_file_mmap check CVE-2010-4347 — kernel: local privilege escalation via /sys/kernel/debug/acpi/custom_method CVE-2010-4565 — kernel: CAN info leak CVE-2010-4648 — kernel: orinoco: fix TKIP countermeasure behaviour CVE-2010-4649 — kernel: IB/uverbs: Handle large number of entries in poll CQ CVE-2010-4655 — kernel: heap contents leak for CAP_NET_ADMIN via ethtool ioctl CVE-2010-4656 — kernel: iowarrior usb device heap overflow CVE-2010-4668 — kernel: panic when submitting certain 0-length I/O requests CVE-2011-0521 — kernel: av7110 negative array offset CVE-2011-1044 — kernel: IB/uverbs: Handle large number of entries in poll CQ

🎯 Affected products33

  • MRG Realtime for RHEL 5 Server
  • kernel-rt-0:2.6.33.7-rt29.55.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-0:2.6.33.7-rt29.55.el5rt.src as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-0:2.6.33.7-rt29.55.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debug-0:2.6.33.7-rt29.55.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debug-0:2.6.33.7-rt29.55.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.55.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debug-debuginfo-0:2.6.33.7-rt29.55.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debug-devel-0:2.6.33.7-rt29.55.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debug-devel-0:2.6.33.7-rt29.55.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debuginfo-0:2.6.33.7-rt29.55.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debuginfo-0:2.6.33.7-rt29.55.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debuginfo-common-0:2.6.33.7-rt29.55.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-debuginfo-common-0:2.6.33.7-rt29.55.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-devel-0:2.6.33.7-rt29.55.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-devel-0:2.6.33.7-rt29.55.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-doc-0:2.6.33.7-rt29.55.el5rt.noarch as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-trace-0:2.6.33.7-rt29.55.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-trace-0:2.6.33.7-rt29.55.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.55.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-trace-debuginfo-0:2.6.33.7-rt29.55.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-trace-devel-0:2.6.33.7-rt29.55.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-trace-devel-0:2.6.33.7-rt29.55.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-vanilla-0:2.6.33.7-rt29.55.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-vanilla-0:2.6.33.7-rt29.55.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.55.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-vanilla-debuginfo-0:2.6.33.7-rt29.55.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-vanilla-devel-0:2.6.33.7-rt29.55.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • kernel-rt-vanilla-devel-0:2.6.33.7-rt29.55.el5rt.x86_64 as a component of MRG Realtime for RHEL 5 Server
  • perf-0:2.6.33.7-rt29.55.el5rt.i686 as a component of MRG Realtime for RHEL 5 Server
  • +3 more not shown

✅ Remediation

Users should upgrade to these updated kernel-rt packages. They are based on upstream version 2.6.33.7.2-rt30 (despite package naming) and correct these issues. The system must be rebooted for this update to take effect. Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.

🔗 References (22)