Patch  oval:com.redhat.rhsa:def:20091193
RHSA-2009:1193: kernel security and bug fix update (Important)  

The kernel packages contain the Linux kernel, the core of any Linux operating system.
Security fixes:
* the possibility of a timeout value overflow was found in the Linux kernel high-resolution timers functionality, hrtimers. This could allow a local, unprivileged user to execute arbitrary code, or cause a denial of service (kernel panic). (CVE-2007-5966, Important)
* a flaw was found in the Intel PRO/1000 network driver in the Linux kernel. Frames with sizes near the MTU of an interface may be split across multiple hardware receive descriptors. Receipt of such a frame could leak through a validation check, leading to a corruption of the length check. A remote attacker could use this flaw to send a specially-crafted packet that would cause a denial of service or code execution. (CVE-2009-1385, Important)
* Michael Tokarev reported a flaw in the Realtek r8169 Ethernet driver in the Linux kernel. This driver allowed interfaces using this driver to receive frames larger than could be handled, which could lead to a remote denial of service or code execution. (CVE-2009-1389, Important)
* the ADDR_COMPAT_LAYOUT and MMAP_PAGE_ZERO flags were not cleared when a setuid or setgid program was executed. A local, unprivileged user could use this flaw to bypass the mmap_min_addr protection mechanism and perform a NULL pointer dereference attack, or bypass the Address Space Layout Randomization (ASLR) security feature. (CVE-2009-1895, Important)
* Ramon de Carvalho Valle reported two flaws in the Linux kernel eCryptfs implementation. A local attacker with permissions to perform an eCryptfs mount could modify the metadata of the files in that eCrypfts mount to cause a buffer overflow, leading to a denial of service or privilege escalation. (CVE-2009-2406, CVE-2009-2407, Important)
* Konstantin Khlebnikov discovered a race condition in the ptrace implementation in the Linux kernel. This race condition can occur when the process tracing and the process being traced participate in a core dump. A local, unprivileged user could use this flaw to trigger a deadlock, resulting in a partial denial of service. (CVE-2009-1388, Moderate)
Bug fixes (see References below for a link to more detailed notes):
* possible dom0 crash when a Xen para-virtualized guest was installed while another para-virtualized guest was rebooting. (BZ#497812)
* no directory removal audit record if the directory and its subtree were recursively watched by an audit rule. (BZ#507561)
* running "echo 1 > /proc/sys/vm/drop_caches" under high memory load could cause a kernel panic. (BZ#503692)
* on 32-bit systems, core dumps for some multithreaded applications did not include all thread information. (BZ#505322)
* a stack buffer used by get_event_name() was too small for nul terminator sprintf() writes. This could lead to an invalid pointer or kernel panic. (BZ#506906)
* when using the aic94xx driver, systems with SATA drives may not boot due to a libsas bug. (BZ#506029)
* Wacom Cintiq 21UX and Intuos stylus buttons were handled incorrectly when moved away from and back to these tablets. (BZ#508275)
* CPU "soft lockup" messages and possibe system hangs on systems with certain Broadcom network devices and running the Linux kernel from the kernel-xen package. (BZ#503689)
* on 64-bit PowerPC, getitimer() failed for programs using the ITIMER_REAL timer that were also compiled for 64-bit systems. This caused such programs to abort. (BZ#510018)
* write operations could be blocked even when using O_NONBLOCK. (BZ#510239)
* the "pci=nomsi" option was required for installing and booting Red Hat Enterprise Linux 5.2 on systems with VIA VT3364 chipsets. (BZ#507529)
* shutting down, destroying, or migrating Xen guests with large amounts of memory could cause other guests to be temporarily unresponsive. (BZ#512311)
Users should upgrade to these updated packages, which contain backported patches to correct these issues. Systems must be rebooted for this update to take effect.
Create Date: 2009-08-04 Last Update Date: 2009-08-04

Affected Platforms/Products

Affected Products (CPE + CVE references)
Platforms: unix (from OVAL definitions)
  • Red Hat Enterprise Linux 5

References

Criteria

The patch should be installed
IF : Any one of the following are true
IF : Red Hat Enterprise Linux must be installed
WARNING! Unknown test oval:com.redhat.rhba:tst:20070304026. Please see help for possible reasons
IF : All of the following are true
IF : Red Hat Enterprise Linux 5 is installed
WARNING! Unknown test oval:com.redhat.rhba:tst:20070331005. Please see help for possible reasons
IF : Any one of the following are true
IF : All of the following are true
IF : kernel-xen-devel is earlier than 0:2.6.18-128.4.1.el5
WARNING! Unknown test oval:com.redhat.rhsa:tst:20091193023. Please see help for possible reasons
IF : kernel-xen-devel is signed with Red Hat redhatrelease key
WARNING! Unknown test oval:com.redhat.rhba:tst:20080314024. Please see help for possible reasons
IF : All of the following are true
IF : kernel-xen is earlier than 0:2.6.18-128.4.1.el5
WARNING! Unknown test oval:com.redhat.rhsa:tst:20091193021. Please see help for possible reasons
IF : kernel-xen is signed with Red Hat redhatrelease key
WARNING! Unknown test oval:com.redhat.rhba:tst:20080314022. Please see help for possible reasons
IF : All of the following are true
IF : kernel-kdump-devel is signed with Red Hat redhatrelease key
WARNING! Unknown test oval:com.redhat.rhba:tst:20080314020. Please see help for possible reasons
IF : kernel-kdump-devel is earlier than 0:2.6.18-128.4.1.el5
WARNING! Unknown test oval:com.redhat.rhsa:tst:20091193019. Please see help for possible reasons
IF : All of the following are true
IF : kernel-kdump is earlier than 0:2.6.18-128.4.1.el5
WARNING! Unknown test oval:com.redhat.rhsa:tst:20091193017. Please see help for possible reasons
IF : kernel-kdump is signed with Red Hat redhatrelease key
WARNING! Unknown test oval:com.redhat.rhba:tst:20080314018. Please see help for possible reasons
IF : All of the following are true
IF : kernel-headers is signed with Red Hat redhatrelease key
WARNING! Unknown test oval:com.redhat.rhba:tst:20080314016. Please see help for possible reasons
IF : kernel-headers is earlier than 0:2.6.18-128.4.1.el5
WARNING! Unknown test oval:com.redhat.rhsa:tst:20091193015. Please see help for possible reasons
IF : All of the following are true
IF : kernel-doc is earlier than 0:2.6.18-128.4.1.el5
WARNING! Unknown test oval:com.redhat.rhsa:tst:20091193013. Please see help for possible reasons
IF : kernel-doc is signed with Red Hat redhatrelease key
WARNING! Unknown test oval:com.redhat.rhba:tst:20080314014. Please see help for possible reasons
IF : All of the following are true
IF : kernel-devel is earlier than 0:2.6.18-128.4.1.el5
WARNING! Unknown test oval:com.redhat.rhsa:tst:20091193011. Please see help for possible reasons
IF : kernel-devel is signed with Red Hat redhatrelease key
WARNING! Unknown test oval:com.redhat.rhba:tst:20080314012. Please see help for possible reasons
IF : All of the following are true
IF : kernel-debug-devel is earlier than 0:2.6.18-128.4.1.el5
WARNING! Unknown test oval:com.redhat.rhsa:tst:20091193009. Please see help for possible reasons
IF : kernel-debug-devel is signed with Red Hat redhatrelease key
WARNING! Unknown test oval:com.redhat.rhba:tst:20080314010. Please see help for possible reasons
IF : All of the following are true
IF : kernel-debug is earlier than 0:2.6.18-128.4.1.el5
WARNING! Unknown test oval:com.redhat.rhsa:tst:20091193007. Please see help for possible reasons
IF : kernel-debug is signed with Red Hat redhatrelease key
WARNING! Unknown test oval:com.redhat.rhba:tst:20080314008. Please see help for possible reasons
IF : All of the following are true
IF : kernel-PAE-devel is signed with Red Hat redhatrelease key
WARNING! Unknown test oval:com.redhat.rhba:tst:20080314006. Please see help for possible reasons
IF : kernel-PAE-devel is earlier than 0:2.6.18-128.4.1.el5
WARNING! Unknown test oval:com.redhat.rhsa:tst:20091193005. Please see help for possible reasons
IF : All of the following are true
IF : kernel-PAE is earlier than 0:2.6.18-128.4.1.el5
WARNING! Unknown test oval:com.redhat.rhsa:tst:20091193003. Please see help for possible reasons
IF : kernel-PAE is signed with Red Hat redhatrelease key
WARNING! Unknown test oval:com.redhat.rhba:tst:20080314004. Please see help for possible reasons
IF : All of the following are true
IF : kernel is signed with Red Hat redhatrelease key
WARNING! Unknown test oval:com.redhat.rhba:tst:20080314002. Please see help for possible reasons
IF : kernel is earlier than 0:2.6.18-128.4.1.el5
WARNING! Unknown test oval:com.redhat.rhsa:tst:20091193001. Please see help for possible reasons
IF : Any one of the following are true
IF : kernel earlier than 0:2.6.18-128.4.1.el5 is set to boot up on next boot
WARNING! Unknown test oval:com.redhat.rhsa:tst:20091193026. Please see help for possible reasons
IF : kernel earlier than 0:2.6.18-128.4.1.el5 is currently running
WARNING! Unknown test oval:com.redhat.rhsa:tst:20091193025. Please see help for possible reasons

Quick Help

Unknown Tests
There is a hardcoded maximum limit for number of tests displayed for a definition. For a small number of oval definitions, about ~1% of all, hundreds of test have been defined. This causes the pages to grow in size, exceed even 1mb, and they are unsuitable for display in a web page. So they are not displayed.Please refer to the xml definition files if you really want to view them.
Other Help Topics
Data Types
What is an Object?
What is a State?
What is a Test?
Other Help Topics
Regular Expression Patterns
Some object or state definitions are defined as regular expression patterns, you should interpret the regexp pattern while evaluating them.

OVAL Definitions By Referenced Objects

How does it work?   User agreement and privacy statement   About & Contact
CVE is a registred trademark of the MITRE Corporation and the authoritive source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritive source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritive source of OVAL content is MITRE's OVAL web site.
Warning: This site and all data are provided as is. It is not guaranteed that all information is accurate and complete. Use any information provided on this site at your own risk. By using this site you accept that you know that these data are provided as is and not guaranteed to be accurate, correct or complete. All trademarks appearing on this site are the property of their respective owners in the US or other countries. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss. PLEASE SEE nvd.nist.gov and oval.mitre.org for more details about OVAL language and definitions.
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor/web site owner/maintainer be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Use of OVAL and all related data is subject to terms of use defined by Mitre at http://oval.mitre.org/oval/about/termsofuse.html