Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Red Hat 6.5: RHSA-2016:2120-01 Important Kernel Privilege Escalation
red hat
October 27, 2016
An update for kernel is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support and Red Hat Enterprise Linux 6.5 Telco Extended Update Support
Solution
For details on how to apply this update, which includes the changes
described in this advisory, refer to:
https://access.redhat.com/articles/11258
The system must be rebooted for this update to take effect.
Summary
The kernel packages contain the Linux kernel, the core of any Linux
operating system.
Security Fix(es):
* A race condition was found in the way the Linux kernel's memory subsystem
handled the copy-on-write (COW) breakage of private read-only memory
mappings. An unprivileged, local user could use this flaw to gain write
access to otherwise read-only memory mappings and thus increase their
privileges on the system. (CVE-2016-5195, Important)
Red Hat would like to thank Phil Oester for reporting this issue.
Topics Covered
References
https://access.redhat.com/security/cve/CVE-2016-5195 https://access.redhat.com/security/updates/classification#important https://access.redhat.com/security/vulnerabilities/DirtyCow
Package List
Red Hat Enterprise Linux Server AUS (v. 6.5):
Source:
kernel-2.6.32-431.75.1.el6.src.rpm
noarch:
kernel-abi-whitelists-2.6.32-431.75.1.el6.noarch.rpm
kernel-doc-2.6.32-431.75.1.el6.noarch.rpm
kernel-firmware-2.6.32-431.75.1.el6.noarch.rpm
x86_64:
kernel-2.6.32-431.75.1.el6.x86_64.rpm
kernel-debug-2.6.32-431.75.1.el6.x86_64.rpm
kernel-debug-debuginfo-2.6.32-431.75.1.el6.x86_64.rpm
kernel-debug-devel-2.6.32-431.75.1.el6.x86_64.rpm
kernel-debuginfo-2.6.32-431.75.1.el6.x86_64.rpm
kernel-debuginfo-common-x86_64-2.6.32-431.75.1.el6.x86_64.rpm
kernel-devel-2.6.32-431.75.1.el6.x86_64.rpm
kernel-headers-2.6.32-431.75.1.el6.x86_64.rpm
perf-2.6.32-431.75.1.el6.x86_64.rpm
perf-debuginfo-2.6.32-431.75.1.el6.x86_64.rpm
python-perf-debuginfo-2.6.32-431.75.1.el6.x86_64.rpm
Red Hat Enterprise Linux Server TUS (v. 6.5):
Source:
kernel-2.6.32-431.75.1.el6.src.rpm
noarch:
kernel-abi-whitelists-2.6.32-431.75.1.el6.noarch.rpm
kernel-doc-2.6.32-431.75.1.el6.noarch.rpm
kernel-firmware-2.6.32-431.75.1.el6.noarch.rpm
x86_64:
kernel-2.6.32-431.75.1.el6.x86_64.rpm
kernel-debug-2.6.32-431.75.1.el6.x86_64.rpm
kernel-debug-debuginfo-2.6.32-431.75.1.el6.x86_64.rpm
kernel-debug-devel-2.6.32-431.75.1.el6.x86_64.rpm
kernel-debuginfo-2.6.32-431.75.1.el6.x86_64.rpm
Read the Full Advisory
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Advisory ID: RHSA-2016:2120-01
Product: Red Hat Enterprise Linux
Advisory URL: https://access.redhat.com/errata/RHSA-2016:2120.html
Issue date: 2016-10-27
Topic
An update for kernel is now available for Red Hat Enterprise Linux 6.5Advanced Update Support and Red Hat Enterprise Linux 6.5 Telco ExtendedUpdate Support.Red Hat Product Security has rated this update as having a security impactof Important. A Common Vulnerability Scoring System (CVSS) base score,which gives a detailed severity rating, is available for each vulnerabilityfrom the CVE link(s) in the References section.
Topics Covered
Relevant Releases Architectures
Red Hat Enterprise Linux Server AUS (v. 6.5) - noarch, x86_64
Red Hat Enterprise Linux Server Optional AUS (v. 6.5) - x86_64
Red Hat Enterprise Linux Server Optional TUS (v. 6.5) - x86_64
Red Hat Enterprise Linux Server TUS (v. 6.5) - noarch, x86_64
Bugs Fixed
1384344 - CVE-2016-5195 kernel: mm: privilege escalation via MAP_PRIVATE COW breakage
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!