RHSA-2015:2411High

Red Hat Security Advisory: kernel-rt security, bug fix, and enhancement update

Published
November 19, 2015
Last Modified
November 7, 2026

🔗 CVE IDs covered (10)

CVE-2013-7421 →CVE-2014-8171 →CVE-2014-9419 →CVE-2014-9644 →CVE-2015-2925 →CVE-2015-3339 →CVE-2015-4170 →CVE-2015-5283 →CVE-2015-7613 →CVE-2015-7837 →

📋 Description

CVE-2013-7421 — kernel: crypto api unprivileged arbitrary module load via request_module() CVE-2014-8171 — kernel: memcg: OOM handling DoS CVE-2014-9419 — kernel: partial ASLR bypass through TLS base addresses leak CVE-2014-9644 — kernel: crypto api unprivileged arbitrary module load via request_module() CVE-2015-2925 — Kernel: vfs: Do not allow escaping from bind mounts CVE-2015-3339 — kernel: race condition between chown() and execve() CVE-2015-4170 — kernel: pty layer race condition on tty ldisc shutdown. CVE-2015-5283 — kernel: Creating multiple sockets when SCTP module isn't loaded leads to kernel panic CVE-2015-7613 — kernel: Unauthorized access to IPC objects with SysV shm CVE-2015-7837 — kernel: securelevel disabled after kexec

🎯 Affected products13

  • Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-0:3.10.0-327.rt56.204.el7.src as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-debug-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-debug-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-debug-devel-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-debuginfo-common-x86_64-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-devel-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-doc-0:3.10.0-327.rt56.204.el7.noarch as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-trace-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-trace-debuginfo-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)
  • kernel-rt-trace-devel-0:3.10.0-327.rt56.204.el7.x86_64 as a component of Red Hat Enterprise Linux for Real Time (v. 7)

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258

🔗 References (19)