Red Hat Security Advisory: kernel-rt security and bug fix update
🔗 CVE IDs covered (21)
📋 Description
CVE-2013-0913 — Kernel: drm/i915: heap writing overflow CVE-2013-0914 — Kernel: sa_restorer information leak CVE-2013-1767 — Kernel: tmpfs: fix use-after-free of mempolicy object CVE-2013-1774 — Kernel: USB io_ti driver NULL pointer dereference in routine chase_port CVE-2013-1792 — Kernel: keys: race condition in install_user_keyrings() CVE-2013-1819 — kernel: xfs: _xfs_buf_find oops on blocks beyond the filesystem end CVE-2013-1848 — kernel: ext3: format string issues CVE-2013-1860 — kernel: usb: cdc-wdm buffer overflow triggered by device CVE-2013-1929 — Kernel: tg3: buffer overflow in VPD firmware parsing CVE-2013-1979 — kernel: net: incorrect SCM_CREDENTIALS passing CVE-2013-2094 — kernel: perf_swevent_enabled array out-of-bound access CVE-2013-2546 — kernel: crypto: info leaks in report API CVE-2013-2547 — kernel: crypto: info leaks in report API CVE-2013-2548 — kernel: crypto: info leaks in report API CVE-2013-2634 — kernel: Information leak in the Data Center Bridging (DCB) component CVE-2013-2635 — kernel: Information leak in the RTNETLINK component CVE-2013-3076 — Kernel: crypto: algif - suppress sending source address information in recvmsg CVE-2013-3222 — Kernel: atm: update msg_namelen in vcc_recvmsg() CVE-2013-3224 — Kernel: Bluetooth: possible info leak in bt_sock_recvmsg() CVE-2013-3225 — Kernel: Bluetooth: RFCOMM - missing msg_namelen update in rfcomm_sock_recvmsg CVE-2013-3231 — Kernel: llc: Fix missing msg_namelen update in llc_ui_recvmsg
🎯 Affected products18
- Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-0:3.6.11.2-rt33.39.el6rt.src as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-0:3.6.11.2-rt33.39.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-debug-0:3.6.11.2-rt33.39.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-debug-debuginfo-0:3.6.11.2-rt33.39.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-debug-devel-0:3.6.11.2-rt33.39.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-debuginfo-0:3.6.11.2-rt33.39.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-debuginfo-common-x86_64-0:3.6.11.2-rt33.39.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-devel-0:3.6.11.2-rt33.39.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-doc-0:3.6.11.2-rt33.39.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-firmware-0:3.6.11.2-rt33.39.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-trace-0:3.6.11.2-rt33.39.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-trace-debuginfo-0:3.6.11.2-rt33.39.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-trace-devel-0:3.6.11.2-rt33.39.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-vanilla-0:3.6.11.2-rt33.39.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-vanilla-debuginfo-0:3.6.11.2-rt33.39.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-vanilla-devel-0:3.6.11.2-rt33.39.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- mrg-rt-release-0:3.6.11.2-rt33.39.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
✅ Remediation
This update also fixes multiple bugs. Documentation for these changes will be available shortly from the Technical Notes document linked to in the References section. Users should upgrade to these updated packages, which upgrade the kernel-rt kernel to version kernel-rt-3.6.11.2-rt33, correct these issues, and fix the bugs noted in the Red Hat Enterprise MRG 2 Technical Notes. The system must be rebooted for this update to take effect. Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
🔗 References (27)
- selfhttps://access.redhat.com/errata/RHSA-2013:0829
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/site/solutions/373743
- externalhttps://rhn.redhat.com/errata/RHBA-2012-0044.html
- externalhttps://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/RHSA-2013-0829.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=915592
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=916191
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=916646
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=918009
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=918098
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=918512
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=920471
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=920499
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=920783
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=921970
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=924689
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=924690
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=927026
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=949932
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=955216
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=955599
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=955629
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=955649
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=956094
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=956162
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=962792
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0829.json