Pinkie Pie discovered a flaw in the Linux kernel's futex subsystem. An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or gain administrative privileges.
(CVE-2014-3153)

Dmitry Vyukov reported a flaw in the Linux kernel's handling of IPv6 UDP Fragmentation Offload (UFO) processing. A remote attacker could leverage this flaw to cause a denial of service (system crash).
(CVE-2013-4387)

Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP Fragmentation Offload (UFO). An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or possibly gain administrative privileges. (CVE-2013-4470)

A flaw was discovered in the Linux kernel's IPC reference counting. An unprivileged local user could exploit this flaw to cause a denial of service (OOM system crash). (CVE-2013-4483)

halfdog reported an error in the AMD K7 and K8 platform support in the Linux kernel. An unprivileged local user could exploit this flaw on AMD based systems to cause a denial of service (task kill) or possibly gain privileges via a crafted application. (CVE-2014-1438)

Sasha Levin reported a bug in the Linux kernel's virtual memory management subsystem. An unprivileged local user could exploit this flaw to cause a denial of service (system crash). (CVE-2014-3122).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002092 advisory.

    The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly     initialize certain data structures, which allows local users to cause a denial of service (memory     corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK     option in a setsockopt system call and sends both short and long packets, related to the     ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in     net/ipv6/ip6_output.c.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000913 advisory.

    The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly     initialize certain data structures, which allows local users to cause a denial of service (memory     corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK     option in a setsockopt system call and sends both short and long packets, related to the     ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in     net/ipv6/ip6_output.c.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Various bug and CVE fixes.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A flaw was discovered in the Linux kernel's dm snapshot facility. A remote authenticated user could exploit this flaw to obtain sensitive information or modify/corrupt data. (CVE-2013-4299)

Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP Fragmenttation Offload (UFO). An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or possibly gain administrative privileges. (CVE-2013-4470).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The SUSE Linux Enterprise 11 Service Pack 3 kernel has been updated to fix various bugs and security issues.

----------------------------------------------------------------------
- WARNING: If you are running KVM with PCI pass-through on a system with one of the following Intel chipsets: 5500 (revision 0x13), 5520 (revision 0x13) or X58 (revisions 0x12, 0x13, 0x22), please make sure to read the following support document before installing this update :

https://www.suse.com/support/kb/doc.php?id=7014344

You will have to update your KVM setup to no longer make use of PCI pass-through before rebooting to the updated kernel.

----------------------------------------------------------------------
-

The following security bugs have been fixed :

  - The Linux kernel before 3.12, when UDP Fragmentation     Offload (UFO) is enabled, does not properly initialize     certain data structures, which allows local users to     cause a denial of service (memory corruption and system     crash) or possibly gain privileges via a crafted     application that uses the UDP_CORK option in a     setsockopt system call and sends both short and long     packets, related to the ip_ufo_append_data function in     net/ipv4/ip_output.c and the ip6_ufo_append_data     function in net/ipv6/ip6_output.c. (bnc#847672).
    (CVE-2013-4470)

  - The microcode on AMD 16h 00h through 0Fh processors does     not properly handle the interaction between locked     instructions and write-combined memory types, which     allows local users to cause a denial of service (system     hang) via a crafted application, aka the errata 793     issue. (bnc#852967). (CVE-2013-6885)

  - The Linux kernel before 3.12.4 updates certain length     values before ensuring that associated data structures     have been initialized, which allows local users to     obtain sensitive information from kernel stack memory     via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system     call, related to net/ipv4/ping.c, net/ipv4/raw.c,     net/ipv4/udp.c, net/ipv6/raw.c, and net/ipv6/udp.c.
    (bnc#857643). (CVE-2013-7263)

  - The l2tp_ip_recvmsg function in net/l2tp/l2tp_ip.c in     the Linux kernel before 3.12.4 updates a certain length     value before ensuring that an associated data structure     has been initialized, which allows local users to obtain     sensitive information from kernel stack memory via a (1)     recvfrom, (2) recvmmsg, or (3) recvmsg system call.
    (bnc#857643). (CVE-2013-7264)

  - The pn_recvmsg function in net/phonet/datagram.c in the     Linux kernel before 3.12.4 updates a certain length     value before ensuring that an associated data structure     has been initialized, which allows local users to obtain     sensitive information from kernel stack memory via a (1)     recvfrom, (2) recvmmsg, or (3) recvmsg system call.
    (bnc#857643). (CVE-2013-7265)

  - The cifs_iovec_write function in fs/cifs/file.c in the     Linux kernel through 3.13.5 does not properly handle     uncached write operations that copy fewer than the     requested number of bytes, which allows local users to     obtain sensitive information from kernel memory, cause a     denial of service (memory corruption and system crash),     or possibly gain privileges via a writev system call     with a crafted pointer. (bnc#864025). (CVE-2014-0069)

Also the following non-security bugs have been fixed :

  - kabi: protect symbols modified by bnc#864833 fix.
    (bnc#864833)

  - mm: mempolicy: fix mbind_range() &amp;&amp; vma_adjust()     interaction (VM Functionality (bnc#866428)).

  - mm: merging memory blocks resets mempolicy (VM     Functionality (bnc#866428)).

  - mm/page-writeback.c: do not count anon pages as     dirtyable memory (High memory utilisation performance     (bnc#859225)).

  - mm: vmscan: Do not force reclaim file pages until it     exceeds anon (High memory utilisation performance     (bnc#859225)).

  - mm: vmscan: fix endless loop in kswapd balancing (High     memory utilisation performance (bnc#859225)).

  - mm: vmscan: Update rotated and scanned when force     reclaimed (High memory utilisation performance     (bnc#859225)).

  - mm: exclude memory less nodes from zone_reclaim.
    (bnc#863526)

  - mm: fix return type for functions nr_free_*_pages kabi     fixup. (bnc#864058)

  - mm: fix return type for functions nr_free_*_pages.
    (bnc#864058)

  - mm: swap: Use swapfiles in priority order (Use swap     files in priority order (bnc#862957)).

  - x86: Save cr2 in NMI in case NMIs take a page fault     (follow-up for     patches.fixes/x86-Add-workaround-to-NMI-iret-woes.patch)     .

  - powerpc: Add VDSO version of getcpu (fate#316816,     bnc#854445).

  - vmscan: change type of vm_total_pages to unsigned long.
    (bnc#864058)

  - audit: dynamically allocate audit_names when not enough     space is in the names array. (bnc#857358)

  - audit: make filetype matching consistent with other     filters. (bnc#857358)

  - arch/x86/mm/srat: Skip NUMA_NO_NODE while parsing SLIT.
    (bnc#863178)

  - hwmon: (coretemp) Fix truncated name of alarm     attributes.

  - privcmd: allow preempting long running user-mode     originating hypercalls. (bnc#861093)

  - nohz: Check for nohz active instead of nohz enabled.
    (bnc#846790)

  - nohz: Fix another inconsistency between CONFIG_NO_HZ=n     and nohz=off. (bnc#846790)

  - iommu/vt-d: add quirk for broken interrupt remapping on     55XX chipsets. (bnc#844513)

  - balloon: do not crash in HVM-with-PoD guests.

  - crypto: s390 - fix des and des3_ede ctr concurrency     issue (bnc#862796, LTC#103744).

  - crypto: s390 - fix des and des3_ede cbc concurrency     issue (bnc#862796, LTC#103743).

  - kernel: oops due to linkage stack instructions     (bnc#862796, LTC#103860).

  - crypto: s390 - fix concurrency issue in aes-ctr mode     (bnc#862796, LTC#103742).

  - dump: Fix dump memory detection (bnc#862796,LTC#103575).

  - net: change type of virtio_chan->p9_max_pages.
    (bnc#864058)

  - inet: handle rt{,6}_bind_peer() failure correctly.
    (bnc#870801)

  - inet: Avoid potential NULL peer dereference.
    (bnc#864833)

  - inet: Hide route peer accesses behind helpers.
    (bnc#864833)

  - inet: Pass inetpeer root into inet_getpeer*()     interfaces. (bnc#864833)

  - tcp: syncookies: reduce cookie lifetime to 128 seconds.
    (bnc#833968)

  - tcp: syncookies: reduce mss table to four values.
    (bnc#833968)

  - ipv6 routing, NLM_F_* flag support: REPLACE and EXCL     flags support, warn about missing CREATE flag.
    (bnc#865783)

  - ipv6: send router reachability probe if route has an     unreachable gateway. (bnc#853162)

  - sctp: Implement quick failover draft from tsvwg.
    (bnc#827670)

  - ipvs: fix AF assignment in ip_vs_conn_new().
    (bnc#856848)

  - NFSD/sunrpc: avoid deadlock on TCP connection due to     memory pressure. (bnc#853455)

  - btrfs: bugfix collection

  - fs/nfsd: change type of max_delegations,     nfsd_drc_max_mem and nfsd_drc_mem_used. (bnc#864058)

  - fs/buffer.c: change type of max_buffer_heads to unsigned     long. (bnc#864058)

  - ncpfs: fix rmdir returns Device or resource busy.
    (bnc#864880)

  - scsi_dh_alua: fixup RTPG retry delay miscalculation.
    (bnc#854025)

  - scsi_dh_alua: Simplify state machine. (bnc#854025)

  - xhci: Fix resume issues on Renesas chips in Samsung     laptops. (bnc#866253)

  - bonding: disallow enslaving a bond to itself.
    (bnc#599263)

  - USB: hub: handle -ETIMEDOUT during enumeration.
    (bnc#855825)

  - dm-multipath: Do not stall on invalid ioctls.
    (bnc#865342)

  - scsi_dh_alua: endless STPG retries for a failed LUN.
    (bnc#865342)

  - net/mlx4_en: Fix pages never dma unmapped on rx.
    (bnc#858604)

  - dlm: remove get_comm. (bnc#827670)

  - dlm: Avoid LVB truncation. (bnc#827670)

  - dlm: disable nagle for SCTP. (bnc#827670)

  - dlm: retry failed SCTP sends. (bnc#827670)

  - dlm: try other IPs when sctp init assoc fails.
    (bnc#827670)

  - dlm: clear correct bit during sctp init failure     handling. (bnc#827670)

  - dlm: set sctp assoc id during setup. (bnc#827670)

  - dlm: clear correct init bit during sctp setup.
    (bnc#827670)

  - dlm: fix deadlock between dlm_send and dlm_controld.
    (bnc#827670)

  - dlm: Fix return value from lockspace_busy().
    (bnc#827670)

  - Avoid occasional hang with NFS. (bnc#852488)

  - mpt2sas: Fix unsafe using smp_processor_id() in     preemptible. (bnc#853166)

  - lockd: send correct lock when granting a delayed lock.
    (bnc#859342)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6.4 Extended Update Support.

The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

* A flaw was found in the way the Linux kernel's IPv6 implementation handled certain UDP packets when the UDP Fragmentation Offload (UFO) feature was enabled. A remote attacker could use this flaw to crash the system or, potentially, escalate their privileges on the system.
(CVE-2013-4387, Important)

* A flaw was found in the way the Linux kernel's TCP/IP protocol suite implementation handled sending of certain UDP packets over sockets that used the UDP_CORK option when the UDP Fragmentation Offload (UFO) feature was enabled on the output device. A local, unprivileged user could use this flaw to cause a denial of service or, potentially, escalate their privileges on the system. (CVE-2013-4470, Important)

* A divide-by-zero flaw was found in the apic_get_tmcct() function in KVM's Local Advanced Programmable Interrupt Controller (LAPIC) implementation. A privileged guest user could use this flaw to crash the host. (CVE-2013-6367, Important)

* A memory corruption flaw was discovered in the way KVM handled virtual APIC accesses that crossed a page boundary. A local, unprivileged user could use this flaw to crash the system or, potentially, escalate their privileges on the system. (CVE-2013-6368, Important)

* A buffer overflow flaw was found in the way the qeth_snmp_command() function in the Linux kernel's QETH network device driver implementation handled SNMP IOCTL requests with an out-of-bounds length. A local, unprivileged user could use this flaw to crash the system or, potentially, escalate their privileges on the system.
(CVE-2013-6381, Important)

* It was found that the fix for CVE-2012-2375 released via RHSA-2012:1580 accidentally removed a check for small-sized result buffers. A local, unprivileged user with access to an NFSv4 mount with ACL support could use this flaw to crash the system or, potentially, escalate their privileges on the system. (CVE-2013-4591, Moderate)

* A format string flaw was found in the Linux kernel's block layer. A privileged, local user could potentially use this flaw to escalate their privileges to kernel level (ring0). (CVE-2013-2851, Low)

Red Hat would like to thank Hannes Frederic Sowa for reporting CVE-2013-4470, Andrew Honig of Google for reporting CVE-2013-6367 and CVE-2013-6368, and Kees Cook for reporting CVE-2013-2851.

This update also fixes several bugs. Documentation for these changes will be available shortly from the Technical Notes document linked to in the References section.

All kernel users are advised to upgrade to these updated packages, which contain backported patches to correct these issues. The system must be rebooted for this update to take effect.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001880 advisory.

    The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly     initialize certain data structures, which allows local users to cause a denial of service (memory     corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK     option in a setsockopt system call and sends both short and long packets, related to the     ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in     net/ipv6/ip6_output.c.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Multiple vulnerabilities has been found and corrected in the Linux kernel :

The ipc_rcu_putref function in ipc/util.c in the Linux kernel before 3.10 does not properly manage a reference count, which allows local users to cause a denial of service (memory consumption or system crash) via a crafted application (CVE-2013-4483).

The skb_flow_dissect function in net/core/flow_dissector.c in the Linux kernel through 3.12 allows remote attackers to cause a denial of service (infinite loop) via a small value in the IHL field of a packet with IPIP encapsulation (CVE-2013-4348).

The Linux kernel before 3.12, when UDP Fragmentation Offload (UFO) is enabled, does not properly initialize certain data structures, which allows local users to cause a denial of service (memory corruption and system crash) or possibly gain privileges via a crafted application that uses the UDP_CORK option in a setsockopt system call and sends both short and long packets, related to the ip_ufo_append_data function in net/ipv4/ip_output.c and the ip6_ufo_append_data function in net/ipv6/ip6_output.c (CVE-2013-4470).

The ext4_orphan_del function in fs/ext4/namei.c in the Linux kernel before 3.7.3 does not properly handle orphan-list entries for non-journal filesystems, which allows physically proximate attackers to cause a denial of service (system hang) via a crafted filesystem on removable media, as demonstrated by the e2fsprogs tests/f_orphan_extents_inode/image.gz test (CVE-2013-2015).

net/ipv6/ip6_output.c in the Linux kernel through 3.11.4 does not properly determine the need for UDP Fragmentation Offload (UFO) processing of small packets after the UFO queueing of a large packet, which allows remote attackers to cause a denial of service (memory corruption and system crash) or possibly have unspecified other impact via network traffic that triggers a large response packet (CVE-2013-4387).

The IPv6 SCTP implementation in net/sctp/ipv6.c in the Linux kernel through 3.11.1 uses data structures and function calls that do not trigger an intended configuration of IPsec encryption, which allows remote attackers to obtain sensitive information by sniffing the network (CVE-2013-4350).

The updated packages provides a solution for these security issues.

Miroslav Vadkerti discovered a flaw in how the permissions for network sysctls are handled in the Linux kernel. An unprivileged local user could exploit this flaw to have privileged access to files in /proc/sys/net/. (CVE-2013-4270)

A flaw was discovered in the Linux kernel's dm snapshot facility. A remote authenticated user could exploit this flaw to obtain sensitive information or modify/corrupt data. (CVE-2013-4299)

Wannes Rombouts reported a vulnerability in the networking tuntap interface of the Linux kernel. A local user with the CAP_NET_ADMIN capability could leverage this flaw to gain full admin privileges.
(CVE-2013-4343)

Alan Chester reported a flaw in the IPv6 Stream Control Transmission Protocol (SCTP) of the Linux kernel. A remote attacker could exploit this flaw to obtain sensitive information by sniffing network traffic.
(CVE-2013-4350)

Dmitry Vyukov reported a flaw in the Linux kernel's handling of IPv6 UDP Fragmentation Offload (UFO) processing. A remote attacker could leverage this flaw to cause a denial of service (system crash).
(CVE-2013-4387)

Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP Fragmenttation Offload (UFO). An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or possibly gain administrative privileges. (CVE-2013-4470).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Updated kernel packages that fix multiple security issues, several bugs, and add two enhancements are now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

* A flaw was found in the way the Linux kernel's TCP/IP protocol suite implementation handled sending of certain UDP packets over sockets that used the UDP_CORK option when the UDP Fragmentation Offload (UFO) feature was enabled on the output device. A local, unprivileged user could use this flaw to cause a denial of service or, potentially, escalate their privileges on the system. (CVE-2013-4470, Important)

* A divide-by-zero flaw was found in the apic_get_tmcct() function in KVM's Local Advanced Programmable Interrupt Controller (LAPIC) implementation. A privileged guest user could use this flaw to crash the host. (CVE-2013-6367, Important)

* A memory corruption flaw was discovered in the way KVM handled virtual APIC accesses that crossed a page boundary. A local, unprivileged user could use this flaw to crash the system or, potentially, escalate their privileges on the system. (CVE-2013-6368, Important)

* An information leak flaw in the Linux kernel could allow a local, unprivileged user to leak kernel memory to user space. (CVE-2013-2141, Low)

Red Hat would like to thank Hannes Frederic Sowa for reporting CVE-2013-4470, and Andrew Honig of Google for reporting CVE-2013-6367 and CVE-2013-6368.

This update also fixes several bugs and adds two enhancements.
Documentation for these changes will be available shortly from the Technical Notes document linked to in the References section

All kernel users are advised to upgrade to these updated packages, which contain backported patches to correct these issues and add these enhancements. The system must be rebooted for this update to take effect.

A flaw was discovered in the Linux kernel's dm snapshot facility. A remote authenticated user could exploit this flaw to obtain sensitive information or modify/corrupt data. (CVE-2013-4299)

Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP Fragmentation Offload (UFO). An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or possibly gain administrative privileges. (CVE-2013-4470)

Multiple integer overflow flaws were discovered in the Alchemy LCD frame- buffer drivers in the Linux kernel. An unprivileged local user could exploit this flaw to gain administrative privileges.
(CVE-2013-4511)

Nico Golde and Fabian Yamaguchi reported a flaw in the Linux kernel's driver for Agere Systems HERMES II Wireless PC Cards. A local user with the CAP_NET_ADMIN capability could exploit this flaw to cause a denial of service or possibly gain administrative priviliges.
(CVE-2013-4514)

Nico Golde and Fabian Yamaguchi reported a flaw in the Linux kernel's driver for Beceem WIMAX chipset based devices. An unprivileged local user could exploit this flaw to obtain sensitive information from kernel memory. (CVE-2013-4515)

A flaw in the handling of memory regions of the kernel virtual machine (KVM) subsystem was discovered. A local user with the ability to assign a device could exploit this flaw to cause a denial of service (memory consumption). (CVE-2013-4592)

Nico Golde and Fabian Yamaguchi reported a flaw in the Linux kernel's debugfs filesystem. An administrative local user could exploit this flaw to cause a denial of service (OOPS). (CVE-2013-6378)

A flaw was discovered in the Linux kernel's compat ioctls for Adaptec AACRAID scsi raid devices. An unprivileged local user could send administrative commands to these devices potentially compromising the data stored on the device. (CVE-2013-6383)

Nico Golde reported a flaw in the Linux kernel's userspace IO (uio) driver. A local user could exploit this flaw to cause a denial of service (memory corruption) or possibly gain privileges.
(CVE-2013-6763)

Evan Huus reported a buffer overflow in the Linux kernel's radiotap header parsing. A remote attacker could cause a denial of service (buffer over- read) via a specially crafted header. (CVE-2013-7027).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-1801 advisory.

    - [x86] kvm: fix cross page vapic_addr access (Paolo Bonzini) [1032214 1032215] {CVE-2013-6368}
    - [x86] kvm: fix division by zero in apic_get_tmcct (Paolo Bonzini) [1032212 1032213] {CVE-2013-6367}
    - [net] ip_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) [1023490 1023491]     {CVE-2013-4470}
    - [net] ip6_output: do skb ufo init for peeked non ufo skb as well (Jiri Pirko) [1023490 1023491]     {CVE-2013-4470}
    - [kernel] signal: stop info leak via the tkill and the tgkill syscalls (Petr Holasek) [970876 970878]     {CVE-2013-2141}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

* A flaw was found in the way the Linux kernel's TCP/IP protocol suite implementation handled sending of certain UDP packets over sockets that used the UDP_CORK option when the UDP Fragmentation Offload (UFO) feature was enabled on the output device. A local, unprivileged user could use this flaw to cause a denial of service or, potentially, escalate their privileges on the system. (CVE-2013-4470, Important)

* A divide-by-zero flaw was found in the apic_get_tmcct() function in KVM's Local Advanced Programmable Interrupt Controller (LAPIC) implementation. A privileged guest user could use this flaw to crash the host. (CVE-2013-6367, Important)

* A memory corruption flaw was discovered in the way KVM handled virtual APIC accesses that crossed a page boundary. A local, unprivileged user could use this flaw to crash the system or, potentially, escalate their privileges on the system. (CVE-2013-6368, Important)

* An information leak flaw in the Linux kernel could allow a local, unprivileged user to leak kernel memory to user space. (CVE-2013-2141, Low)

This update also fixes several bugs and adds two enhancements.

The system must be rebooted for this update to take effect.

Hannes Frederic Sowa discovered a flaw in the Linux kernel's UDP Fragmentation Offload (UFO). An unprivileged local user could exploit this flaw to cause a denial of service (system crash) or possibly gain administrative privileges. (CVE-2013-4470)

Multiple integer overflow flaws were discovered in the Alchemy LCD frame- buffer drivers in the Linux kernel. An unprivileged local user could exploit this flaw to gain administrative privileges.
(CVE-2013-4511)

Nico Golde and Fabian Yamaguchi reported a buffer overflow in the Ozmo Devices USB over WiFi devices. A local user could exploit this flaw to cause a denial of service or possibly unspecified impact.
(CVE-2013-4513)

Nico Golde and Fabian Yamaguchi reported a flaw in the Linux kernel's driver for Agere Systems HERMES II Wireless PC Cards. A local user with the CAP_NET_ADMIN capability could exploit this flaw to cause a denial of service or possibly gain administrative priviliges.
(CVE-2013-4514)

Nico Golde and Fabian Yamaguchi reported a flaw in the Linux kernel's driver for Beceem WIMAX chipset based devices. An unprivileged local user could exploit this flaw to obtain sensitive information from kernel memory. (CVE-2013-4515)

Nico Golde and Fabian Yamaguchi reported a flaw in the Linux kernel's driver for the SystemBase Multi-2/PCI serial card. An unprivileged user could obtain sensitive information from kernel memory.
(CVE-2013-4516)

A flaw was discovered in the Linux kernel's compat ioctls for Adaptec AACRAID scsi raid devices. An unprivileged local user could send administrative commands to these devices potentially compromising the data stored on the device. (CVE-2013-6383)

Nico Golde reported a flaw in the Linux kernel's userspace IO (uio) driver. A local user could exploit this flaw to cause a denial of service (memory corruption) or possibly gain privileges.
(CVE-2013-6763)

Evan Huus reported a buffer overflow in the Linux kernel's radiotap header parsing. A remote attacker could cause a denial of service (buffer over- read) via a specially crafted header. (CVE-2013-7027).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
74354	Ubuntu 10.04 LTS : linux vulnerabilities (USN-2233-1)	Nessus	Ubuntu Local Security Checks	2014/6/6	2022/5/25	high
286714	Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002092)	Nessus	Unity Linux Local Security Checks	2026/1/15	2026/1/15	high
291014	Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000913)	Nessus	Unity Linux Local Security Checks	2026/1/16	2026/1/16	high
70751	Fedora 19 : kernel-3.11.6-201.fc19 (2013-20547)	Nessus	Fedora Local Security Checks	2013/11/5	2021/1/11	high
71208	Ubuntu 12.04 LTS : linux-lts-saucy vulnerabilities (USN-2042-1)	Nessus	Ubuntu Local Security Checks	2013/12/4	2019/9/19	medium
73554	SuSE 11.3 Security Update : Linux kernel (SAT Patch Numbers 9102 / 9104 / 9105)	Nessus	SuSE Local Security Checks	2014/4/16	2021/1/19	medium
79000	RHEL 6 : kernel (RHSA-2014:0284)	Nessus	Red Hat Local Security Checks	2014/11/8	2021/1/14	medium
74355	Ubuntu 10.04 LTS : linux-ec2 vulnerabilities (USN-2234-1)	Nessus	Ubuntu Local Security Checks	2014/6/6	2022/5/25	high
286394	Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001880)	Nessus	Unity Linux Local Security Checks	2026/1/15	2026/1/15	high
70837	Mandriva Linux Security Advisory : kernel (MDVSA-2013:265)	Nessus	Mandriva Local Security Checks	2013/11/11	2021/1/6	high
71260	Ubuntu 13.10 : linux vulnerabilities (USN-2049-1)	Nessus	Ubuntu Local Security Checks	2013/12/9	2019/9/19	medium
71379	CentOS 6 : kernel (CESA-2013:1801)	Nessus	CentOS Local Security Checks	2013/12/13	2021/1/4	medium
71793	Ubuntu 12.04 LTS : linux vulnerabilities (USN-2066-1)	Nessus	Ubuntu Local Security Checks	2014/1/5	2021/1/19	medium
71209	Ubuntu 12.10 : linux vulnerabilities (USN-2043-1)	Nessus	Ubuntu Local Security Checks	2013/12/4	2019/9/19	medium
71387	Oracle Linux 6 : kernel (ELSA-2013-1801)	Nessus	Oracle Linux Local Security Checks	2013/12/13	2026/2/9	high
71491	Scientific Linux Security Update : kernel on SL6.x i386/x86_64 (20131212)	Nessus	Scientific Linux Local Security Checks	2013/12/17	2021/1/14	medium
71798	Ubuntu 13.04 : linux vulnerabilities (USN-2073-1)	Nessus	Ubuntu Local Security Checks	2014/1/5	2021/1/19	medium

检测

插件搜索

high

high

high

high

medium

medium

medium

high

high

high

medium

medium

medium

medium

high

medium

medium