Updated kernel packages that fix one security issue are now available for Red Hat Enterprise Linux 6.5 Extended Update Support.

Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

* A flaw was found in the way the Linux kernel handled GS segment register base switching when recovering from a #SS (stack segment) fault on an erroneous return to user space. A local, unprivileged user could use this flaw to escalate their privileges on the system.
(CVE-2014-9322, Important)

Red Hat would like to thank Andy Lutomirski for reporting this issue.

All kernel users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. The system must be rebooted for this update to take effect.

* A flaw was found in the way the Linux kernel handled GS segment register base switching when recovering from a #SS (stack segment) fault on an erroneous return to user space. A local, unprivileged user could use this flaw to escalate their privileges on the system.
(CVE-2014-9322, Important)

The system must be rebooted for this update to take effect.

From Red Hat Security Advisory 2014:2008 :

Updated kernel packages that fix one security issue are now available for Red Hat Enterprise Linux 5.

Red Hat Product Security has rated this update as having Important security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section.

The kernel packages contain the Linux kernel, the core of any Linux operating system.

* A flaw was found in the way the Linux kernel handled GS segment register base switching when recovering from a #SS (stack segment) fault on an erroneous return to user space. A local, unprivileged user could use this flaw to escalate their privileges on the system.
(CVE-2014-9322, Important)

Red Hat would like to thank Andy Lutomirski for reporting this issue.

All kernel users are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. The system must be rebooted for this update to take effect.

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3106 advisory.

    - isofs: Fix unbounded recursion when processing relocated directories (Jan Kara)  [Orabug: 20224059]     {CVE-2014-5471} {CVE-2014-5472}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3107 advisory.

    - isofs: Fix unbounded recursion when processing relocated directories (Jan Kara)  [Orabug: 20224060]     {CVE-2014-5471} {CVE-2014-5472}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2014-3108 advisory.

    - net: guard tcp_set_keepalive() to tcp sockets (Eric Dumazet)  [Orabug: 20224099]  {CVE-2012-6657}
    - isofs: Fix unbounded recursion when processing relocated directories (Jan Kara)  [Orabug: 20224061]     {CVE-2014-5471} {CVE-2014-5472}

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

arch/x86/kernel/entry_64.S in the Linux kernel before 3.17.5 does not properly handle faults associated with the Stack Segment (SS) segment register, which allows local users to gain privileges by triggering an IRET instruction that leads to access to a GS Base address from the wrong space.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
80097	RHEL 6 : kernel (RHSA-2014:2009)	Nessus	Red Hat Local Security Checks	2014/12/18	2021/1/14	high
80100	Scientific Linux Security Update : kernel on SL5.x i386/x86_64 (20141217)	Nessus	Scientific Linux Local Security Checks	2014/12/18	2021/1/14	high
80110	Oracle Linux 5 : kernel (ELSA-2014-2008-1)	Nessus	Oracle Linux Local Security Checks	2014/12/19	2021/1/14	high
80156	Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2014-3106)	Nessus	Oracle Linux Local Security Checks	2014/12/22	2026/2/9	high
80157	Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3107)	Nessus	Oracle Linux Local Security Checks	2014/12/22	2026/2/9	high
80158	Oracle Linux 5 / 6 : Unbreakable Enterprise kernel (ELSA-2014-3108)	Nessus	Oracle Linux Local Security Checks	2014/12/22	2026/2/9	high
85947	F5 Networks BIG-IP : Linux kernel vulnerability (SOL16122)	Nessus	F5 Networks Local Security Checks	2015/9/16	2021/3/10	high

检测

插件搜索

high

high

high

high

high

high

high