Oval Definition:oval:com.redhat.rhsa:def:20070936
Revision Date:2007-09-27Version:635
Title:RHSA-2007:0936: kernel security update (Important)
Description:The Linux kernel handles the basic functions of the operating system.

A flaw was found in the IA32 system call emulation provided on AMD64 and Intel 64 platforms. An improperly validated 64-bit value could be stored in the %RAX register, which could trigger an out-of-bounds system call table access. An untrusted local user could exploit this flaw to run code in the kernel (ie a root privilege escalation). (CVE-2007-4573).

Red Hat would like to thank Wojciech Purczynski for reporting this issue.

Red Hat Enterprise Linux 5 users are advised to upgrade to these packages, which contain a backported patch to correct this issue.
Family:unixClass:patch
Status:Reference(s):CVE-2007-4573
RHSA-2007:0936
RHSA-2007:0936-01
RHSA-2007:0936-01
Platform(s):Red Hat Enterprise Linux 5
Product(s):
Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND
  • kernel earlier than 0:2.6.18-8.1.14.el5 is currently running
  • OR kernel earlier than 0:2.6.18-8.1.14.el5 is set to boot up on next boot
  • AND
  • kernel is earlier than 0:2.6.18-8.1.14.el5
  • AND kernel is signed with Red Hat redhatrelease2 key
  • kernel-PAE is earlier than 0:2.6.18-8.1.14.el5
  • AND kernel-PAE is signed with Red Hat redhatrelease2 key
  • kernel-PAE-devel is earlier than 0:2.6.18-8.1.14.el5
  • AND kernel-PAE-devel is signed with Red Hat redhatrelease2 key
  • kernel-devel is earlier than 0:2.6.18-8.1.14.el5
  • AND kernel-devel is signed with Red Hat redhatrelease2 key
  • kernel-doc is earlier than 0:2.6.18-8.1.14.el5
  • AND kernel-doc is signed with Red Hat redhatrelease2 key
  • kernel-headers is earlier than 0:2.6.18-8.1.14.el5
  • AND kernel-headers is signed with Red Hat redhatrelease2 key
  • kernel-kdump is earlier than 0:2.6.18-8.1.14.el5
  • AND kernel-kdump is signed with Red Hat redhatrelease2 key
  • kernel-kdump-devel is earlier than 0:2.6.18-8.1.14.el5
  • AND kernel-kdump-devel is signed with Red Hat redhatrelease2 key
  • kernel-xen is earlier than 0:2.6.18-8.1.14.el5
  • AND kernel-xen is signed with Red Hat redhatrelease2 key
  • kernel-xen-devel is earlier than 0:2.6.18-8.1.14.el5
  • AND kernel-xen-devel is signed with Red Hat redhatrelease2 key
  • BACK