Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update
🔗 CVE IDs covered (10)
📋 Description
CVE-2013-4483 — kernel: ipc: ipc_rcu_putref refcount races CVE-2013-7263 — Kernel: net: leakage of uninitialized memory to user-space via recv syscalls CVE-2013-7265 — Kernel: net: leakage of uninitialized memory to user-space via recv syscalls CVE-2013-7339 — kernel: net: rds: dereference of a NULL device in rds_ib_laddr_check() CVE-2014-0069 — kernel: cifs: incorrect handling of bogus user pointers during uncached writes CVE-2014-1438 — kernel: x86: exceptions are not cleared in AMD FXSAVE workaround CVE-2014-1690 — Kernel: netfilter: nf_nat: leakage of uninitialized buffer in IRC NAT helper CVE-2014-1874 — Kernel: SELinux: local denial-of-service CVE-2014-2309 — Kernel: net: IPv6: crash due to router advertisement flooding CVE-2014-2523 — kernel: netfilter: nf_conntrack_dccp: incorrect skb_header_pointer API usages
🎯 Affected products17
- Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-0:3.10.33-rt32.33.el6rt.src as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-debug-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-debug-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-debug-devel-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-debuginfo-common-x86_64-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-devel-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-doc-0:3.10.33-rt32.33.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-firmware-0:3.10.33-rt32.33.el6rt.noarch as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-trace-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-trace-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-trace-devel-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-vanilla-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-vanilla-debuginfo-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
- kernel-rt-vanilla-devel-0:3.10.33-rt32.33.el6rt.x86_64 as a component of Red Hat MRG Realtime for RHEL 6 Server v.2
✅ Remediation
Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/site/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.
🔗 References (15)
- selfhttps://access.redhat.com/errata/RHSA-2014:0439
- externalhttps://access.redhat.com/security/updates/classification/#important
- externalhttps://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_MRG/2/html/Technical_Notes/index.html
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1016735
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1032245
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1035875
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1052914
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1058748
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1058848
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1062356
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1064253
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1067880
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1074471
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1077343
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0439.json