RHSA-2014:1971High

Red Hat Security Advisory: kernel security and bug fix update

Published
December 9, 2014
Last Modified
November 7, 2026

🔗 CVE IDs covered (18)

CVE-2013-2929 →CVE-2014-1739 →CVE-2014-3181 →CVE-2014-3182 →CVE-2014-3184 →CVE-2014-3185 →CVE-2014-3186 →CVE-2014-3631 →CVE-2014-3673 →CVE-2014-3687 →CVE-2014-3688 →CVE-2014-4027 →CVE-2014-4652 →CVE-2014-4654 →CVE-2014-4655 →CVE-2014-4656 →CVE-2014-5045 →CVE-2014-6410 →

📋 Description

CVE-2013-2929 — kernel: exec/ptrace: get_dumpable() incorrect tests CVE-2014-1739 — Kernel: drivers: media: an information leakage CVE-2014-3181 — Kernel: HID: OOB write in magicmouse driver CVE-2014-3182 — Kernel: HID: logitech-dj OOB array access CVE-2014-3184 — Kernel: HID: off by one error in various _report_fixup routines CVE-2014-3185 — Kernel: USB serial: memory corruption flaw CVE-2014-3186 — Kernel: HID: memory corruption via OOB write CVE-2014-3631 — kernel: keys: incorrect termination condition in assoc array garbage collection CVE-2014-3673 — kernel: sctp: skb_over_panic when receiving malformed ASCONF chunks CVE-2014-3687 — kernel: net: sctp: fix panic on duplicate ASCONF chunks CVE-2014-3688 — kernel: net: sctp: remote memory pressure from excessive queueing CVE-2014-4027 — Kernel: target/rd: imformation leakage CVE-2014-4652 — Kernel: ALSA: control: protect user controls against races & memory disclosure CVE-2014-4654 — Kernel: ALSA: control: use-after-free in replacing user controls CVE-2014-4655 — Kernel: ALSA: control: use-after-free in replacing user controls CVE-2014-4656 — Kernel: ALSA: control: integer overflow in id.index & id.numid CVE-2014-5045 — kernel: vfs: refcount issues during unmount on symlink CVE-2014-6410 — kernel: udf: Avoid infinite loop when processing indirect ICBs

🎯 Affected products152

  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux Client Optional (v. 7)
  • Red Hat Enterprise Linux ComputeNode (v. 7)
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux Server Optional (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • Red Hat Enterprise Linux Workstation Optional (v. 7)
  • kernel-0:3.10.0-123.13.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-0:3.10.0-123.13.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-0:3.10.0-123.13.1.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)
  • kernel-0:3.10.0-123.13.1.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • kernel-0:3.10.0-123.13.1.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-0:3.10.0-123.13.1.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • kernel-0:3.10.0-123.13.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
  • kernel-0:3.10.0-123.13.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • kernel-0:3.10.0-123.13.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-0:3.10.0-123.13.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • kernel-abi-whitelists-0:3.10.0-123.13.1.el7.noarch as a component of Red Hat Enterprise Linux Client (v. 7)
  • kernel-abi-whitelists-0:3.10.0-123.13.1.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • kernel-abi-whitelists-0:3.10.0-123.13.1.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-abi-whitelists-0:3.10.0-123.13.1.el7.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • kernel-bootwrapper-0:3.10.0-123.13.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-debug-0:3.10.0-123.13.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-debug-0:3.10.0-123.13.1.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-debug-0:3.10.0-123.13.1.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
  • kernel-debug-0:3.10.0-123.13.1.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • kernel-debug-0:3.10.0-123.13.1.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-debug-0:3.10.0-123.13.1.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • kernel-debug-debuginfo-0:3.10.0-123.13.1.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • +122 more not shown

✅ Remediation

Red Hat would like to thank Frey Alfredsson for reporting CVE-2014-3631, and Vasily Averin of Parallels for reporting CVE-2014-5045. The CVE-2014-3673 was discovered by Liu Wei of Red Hat. All kernel users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. The system must be rebooted for this update to take effect. Before applying this update, make sure all previously released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 To install kernel packages manually, use "rpm -ivh [package]". Do not use "rpm -Uvh" as that will remove the running kernel binaries from your system. You may use "rpm -e" to remove old kernels after determining that the new kernel functions properly on your system.

🔗 References (20)