RHSA-2015:2152High

Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Published
November 19, 2015
Last Modified
November 7, 2026

🔗 CVE IDs covered (19)

CVE-2010-5313 →CVE-2013-7421 →CVE-2014-3647 →CVE-2014-7842 →CVE-2014-8171 →CVE-2014-9419 →CVE-2014-9644 →CVE-2015-0239 →CVE-2015-2925 →CVE-2015-3288 →CVE-2015-3339 →CVE-2015-4170 →CVE-2015-5283 →CVE-2015-6526 →CVE-2015-7553 →CVE-2015-7613 →CVE-2015-7837 →CVE-2015-8215 →CVE-2016-0774 →

📋 Description

CVE-2010-5313 — kernel: kvm: reporting emulation failures to userspace CVE-2013-7421 — kernel: crypto api unprivileged arbitrary module load via request_module() CVE-2014-3647 — kernel: kvm: noncanonical rip after emulation CVE-2014-7842 — kernel: kvm: reporting emulation failures to userspace CVE-2014-8171 — kernel: memcg: OOM handling DoS CVE-2014-9419 — kernel: partial ASLR bypass through TLS base addresses leak CVE-2014-9644 — kernel: crypto api unprivileged arbitrary module load via request_module() CVE-2015-0239 — kernel: kvm: insufficient sysenter emulation when invoked from 16-bit code CVE-2015-2925 — Kernel: vfs: Do not allow escaping from bind mounts CVE-2015-3288 — kernel: zero page memory arbitrary modification CVE-2015-3339 — kernel: race condition between chown() and execve() CVE-2015-4170 — kernel: pty layer race condition on tty ldisc shutdown. CVE-2015-5283 — kernel: Creating multiple sockets when SCTP module isn't loaded leads to kernel panic CVE-2015-6526 — kernel: perf on ppc64 can loop forever getting userlevel stacktraces CVE-2015-7553 — kernel: nfnetlink race in NETLINK_NFLOG socket creation CVE-2015-7613 — kernel: Unauthorized access to IPC objects with SysV shm CVE-2015-7837 — kernel: securelevel disabled after kexec CVE-2015-8215 — kernel: MTU value is not validated in IPv6 stack causing packet loss CVE-2016-0774 — kernel: pipe buffer state corruption after unsuccessful atomic read from pipe

🎯 Affected products169

  • Red Hat Enterprise Linux Client (v. 7)
  • Red Hat Enterprise Linux Client Optional (v. 7)
  • Red Hat Enterprise Linux ComputeNode (v. 7)
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7)
  • Red Hat Enterprise Linux Server (v. 7)
  • Red Hat Enterprise Linux Server Optional (v. 7)
  • Red Hat Enterprise Linux Workstation (v. 7)
  • Red Hat Enterprise Linux Workstation Optional (v. 7)
  • kernel-0:3.10.0-327.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-0:3.10.0-327.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-0:3.10.0-327.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-0:3.10.0-327.el7.src as a component of Red Hat Enterprise Linux Client (v. 7)
  • kernel-0:3.10.0-327.el7.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • kernel-0:3.10.0-327.el7.src as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-0:3.10.0-327.el7.src as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • kernel-0:3.10.0-327.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
  • kernel-0:3.10.0-327.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • kernel-0:3.10.0-327.el7.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-0:3.10.0-327.el7.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • kernel-abi-whitelists-0:3.10.0-327.el7.noarch as a component of Red Hat Enterprise Linux Client (v. 7)
  • kernel-abi-whitelists-0:3.10.0-327.el7.noarch as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • kernel-abi-whitelists-0:3.10.0-327.el7.noarch as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-abi-whitelists-0:3.10.0-327.el7.noarch as a component of Red Hat Enterprise Linux Workstation (v. 7)
  • kernel-bootwrapper-0:3.10.0-327.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-bootwrapper-0:3.10.0-327.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-debug-0:3.10.0-327.el7.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-debug-0:3.10.0-327.el7.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-debug-0:3.10.0-327.el7.s390x as a component of Red Hat Enterprise Linux Server (v. 7)
  • kernel-debug-0:3.10.0-327.el7.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)
  • kernel-debug-0:3.10.0-327.el7.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)
  • +139 more not shown

✅ Remediation

Red Hat would like to thank Nadav Amit for reporting the CVE-2010-5313, CVE-2014-3647, CVE-2014-7842, and CVE-2015-0239 issues; and Linn Crosetto of HP for reporting the CVE-2015-7837 issue. The CVE-2015-5283 issue was discovered by Ji Jianwen from Red Hat engineering. This update fixes several hundred bugs and adds numerous enhancements. Refer to the Red Hat Enterprise Linux 7.2 Release Notes for information on the most significant of these changes, and the following Knowledge base article for further information: https://access.redhat.com/articles/1749293 All Red Hat Enterprise Linux 7 users are advised to install these updated packages, which correct these issues and add these enhancements. The system must be rebooted for this update to take effect. Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (40)