Oval Definition:	oval:com.redhat.rhsa:def:20100718
Revision Date: 2010-09-28 Version: 635 Title: RHSA-2010:0718: kernel security update (Important) Description: The kernel packages contain the Linux kernel, the core of any Linux operating system. This update fixes the following security issue: The compat_alloc_user_space() function in the Linux kernel 32/64-bit compatibility layer implementation was missing sanity checks. This function could be abused in other areas of the Linux kernel if its length argument can be controlled from user-space. On 64-bit systems, a local, unprivileged user could use this flaw to escalate their privileges. (CVE-2010-3081, Important) Red Hat would like to thank Ben Hawkes for reporting this issue. Refer to Knowledgebase article DOC-40265 for further details: https://access.redhat.com/kb/docs/DOC-40265 Users should upgrade to these updated packages, which contain a backported patch to correct this issue. The system must be rebooted for this update to take effect. Family: unix Class: patch Status: Reference(s): CVE-2010-3081 RHSA-2010:0718 RHSA-2010:0718-01 RHSA-2010:0718-01 Platform(s): Red Hat Enterprise Linux 4 Product(s): Definition Synopsis Red Hat Enterprise Linux must be installed OR Package Information Red Hat Enterprise Linux 4 is installed AND kernel earlier than 0:2.6.9-89.29.1.EL is currently running OR kernel earlier than 0:2.6.9-89.29.1.EL is set to boot up on next boot AND kernel is earlier than 0:2.6.9-89.29.1.EL AND kernel is signed with Red Hat redhatrelease2 key kernel-devel is earlier than 0:2.6.9-89.29.1.EL AND kernel-devel is signed with Red Hat redhatrelease2 key kernel-doc is earlier than 0:2.6.9-89.29.1.EL AND kernel-doc is signed with Red Hat redhatrelease2 key kernel-hugemem is earlier than 0:2.6.9-89.29.1.EL AND kernel-hugemem is signed with Red Hat redhatrelease2 key kernel-hugemem-devel is earlier than 0:2.6.9-89.29.1.EL AND kernel-hugemem-devel is signed with Red Hat redhatrelease2 key kernel-largesmp is earlier than 0:2.6.9-89.29.1.EL AND kernel-largesmp is signed with Red Hat redhatrelease2 key kernel-largesmp-devel is earlier than 0:2.6.9-89.29.1.EL AND kernel-largesmp-devel is signed with Red Hat redhatrelease2 key kernel-smp is earlier than 0:2.6.9-89.29.1.EL AND kernel-smp is signed with Red Hat redhatrelease2 key kernel-smp-devel is earlier than 0:2.6.9-89.29.1.EL AND kernel-smp-devel is signed with Red Hat redhatrelease2 key kernel-xenU is earlier than 0:2.6.9-89.29.1.EL AND kernel-xenU is signed with Red Hat redhatrelease2 key kernel-xenU-devel is earlier than 0:2.6.9-89.29.1.EL AND kernel-xenU-devel is signed with Red Hat redhatrelease2 key
BACK