Red Hat Security Advisory: kernel security and bug fix update
🔗 CVE IDs covered (16)
📋 Description
CVE-2012-6537 — Kernel: xfrm_user information leaks copy_to_user_ CVE-2012-6538 — Kernel: xfrm_user: info leak in copy_to_user_auth CVE-2012-6546 — Kernel: atm: information leak in getsockopt & getsockname CVE-2012-6547 — Kernel: net/tun: ioctl() based information leaks CVE-2013-0349 — kernel: bluetooth HIDP implementation information disclosure CVE-2013-0913 — Kernel: drm/i915: heap writing overflow CVE-2013-1767 — Kernel: tmpfs: fix use-after-free of mempolicy object CVE-2013-1773 — kernel: VFAT slab-based buffer overflow CVE-2013-1774 — Kernel: USB io_ti driver NULL pointer dereference in routine chase_port CVE-2013-1792 — Kernel: keys: race condition in install_user_keyrings() CVE-2013-1796 — kernel: kvm: buffer overflow in handling of MSR_KVM_SYSTEM_TIME CVE-2013-1797 — kernel: kvm: after free issue with the handling of MSR_KVM_SYSTEM_TIME CVE-2013-1798 — kernel: kvm: out-of-bounds access in ioapic indirect register reads CVE-2013-1826 — Kernel: xfrm_user: return error pointer instead of NULL CVE-2013-1827 — Kernel: dccp: check ccid before NULL poiter dereference CVE-2014-0196 — kernel: pty layer race condition leading to memory corruption
🎯 Affected products182
- Red Hat Enterprise Linux Desktop (v. 6)
- Red Hat Enterprise Linux Desktop Optional (v. 6)
- Red Hat Enterprise Linux HPC Node (v. 6)
- Red Hat Enterprise Linux HPC Node Optional (v. 6)
- Red Hat Enterprise Linux Server (v. 6)
- Red Hat Enterprise Linux Server Optional (v. 6)
- Red Hat Enterprise Linux Workstation (v. 6)
- Red Hat Enterprise Linux Workstation Optional (v. 6)
- kernel-0:2.6.32-358.6.1.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
- kernel-0:2.6.32-358.6.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
- kernel-0:2.6.32-358.6.1.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
- kernel-0:2.6.32-358.6.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
- kernel-0:2.6.32-358.6.1.el6.s390x as a component of Red Hat Enterprise Linux Server (v. 6)
- kernel-0:2.6.32-358.6.1.el6.src as a component of Red Hat Enterprise Linux Desktop (v. 6)
- kernel-0:2.6.32-358.6.1.el6.src as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)
- kernel-0:2.6.32-358.6.1.el6.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)
- kernel-0:2.6.32-358.6.1.el6.src as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)
- kernel-0:2.6.32-358.6.1.el6.src as a component of Red Hat Enterprise Linux Server (v. 6)
- kernel-0:2.6.32-358.6.1.el6.src as a component of Red Hat Enterprise Linux Server Optional (v. 6)
- kernel-0:2.6.32-358.6.1.el6.src as a component of Red Hat Enterprise Linux Workstation (v. 6)
- kernel-0:2.6.32-358.6.1.el6.src as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)
- kernel-0:2.6.32-358.6.1.el6.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)
- kernel-0:2.6.32-358.6.1.el6.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)
- kernel-0:2.6.32-358.6.1.el6.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)
- kernel-0:2.6.32-358.6.1.el6.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)
- kernel-bootwrapper-0:2.6.32-358.6.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
- kernel-debug-0:2.6.32-358.6.1.el6.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)
- kernel-debug-0:2.6.32-358.6.1.el6.i686 as a component of Red Hat Enterprise Linux Server (v. 6)
- kernel-debug-0:2.6.32-358.6.1.el6.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)
- kernel-debug-0:2.6.32-358.6.1.el6.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)
- +152 more not shown
✅ Remediation
This update also fixes several bugs. Documentation for these changes will be available shortly from the Technical Notes document linked to in the References section. Users should upgrade to these updated packages, which contain backported patches to correct these issues. The system must be rebooted for this update to take effect. Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
🔗 References (18)
- selfhttps://access.redhat.com/errata/RHSA-2013:0744
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.4_Technical_Notes/kernel.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=914298
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=915592
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=916115
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=916191
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=916646
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=917012
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=917013
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=917017
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=919164
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=919384
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=920471
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=922344
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=922383
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=922424
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0744.json