Scientific Linux 5.x: 2007-09-27 Critical: Kernel Root Exploit

Sep 28, 2007 •

LinuxSecurity Advisories

7 - 13 min read

Scientific Large Esm H500

Topics Covered

security advisory privilege escalation local exploit kernel SL5 root

Important: kernel security update

Date: Fri, 28 Sep 2007 16:31:18 -0500
Reply-To: Troy Dawson 
Sender: Security Errata for Scientific Linux
 
From: Troy Dawson 
Subject: Security ERRATA for kernel on SL5.x, SL4.x, SL3,x i386/x86_64
Comments: To: This email address is being protected from spambots. You need JavaScript enabled to view it.

Synopsis:	Important: kernel security update
Issue date:	2007-09-27
CVE Names:	CVE-2007-4573

A flaw was found in the IA32 system call emulation provided on AMD64 and
Intel 64 platforms. An improperly validated 64-bit value could be stored in
the %RAX register, which could trigger an out-of-bounds system call table
access. An untrusted local user could exploit this flaw to run code in the
kernel (ie a root privilege escalation). (CVE-2007-4573).

Please Note: Kernel's and their dependancies do *NOT* get autoyumed. You have
to update them by hand by simply typing 'yum update'

SL 3.0.x

 SRPMS:
kernel-2.4.21-52.EL.src.rpm
 i386:
kernel-2.4.21-52.EL.athlon.rpm
kernel-2.4.21-52.EL.i686.rpm
kernel-BOOT-2.4.21-52.EL.i386.rpm
kernel-doc-2.4.21-52.EL.i386.rpm
kernel-hugemem-2.4.21-52.EL.i686.rpm
kernel-hugemem-unsupported-2.4.21-52.EL.i686.rpm
kernel-smp-2.4.21-52.EL.athlon.rpm
kernel-smp-2.4.21-52.EL.i686.rpm
kernel-smp-unsupported-2.4.21-52.EL.athlon.rpm
kernel-smp-unsupported-2.4.21-52.EL.i686.rpm
kernel-source-2.4.21-52.EL.i386.rpm
kernel-unsupported-2.4.21-52.EL.athlon.rpm
kernel-unsupported-2.4.21-52.EL.i686.rpm
 Dependancies:
kernel-module-openafs-2.4.21-52.EL-1.2.13-15.17.SL.athlon.rpm
kernel-module-openafs-2.4.21-52.EL-1.2.13-15.17.SL.i686.rpm
kernel-module-openafs-2.4.21-52.ELsmp-1.2.13-15.17.SL.athlon.rpm
kernel-module-openafs-2.4.21-52.ELsmp-1.2.13-15.17.SL.i686.rpm
 x86_64:
kernel-2.4.21-52.EL.ia32e.rpm
kernel-2.4.21-52.EL.x86_64.rpm
kernel-doc-2.4.21-52.EL.x86_64.rpm
kernel-smp-2.4.21-52.EL.x86_64.rpm
kernel-smp-unsupported-2.4.21-52.EL.x86_64.rpm
kernel-source-2.4.21-52.EL.x86_64.rpm
kernel-unsupported-2.4.21-52.EL.ia32e.rpm
kernel-unsupported-2.4.21-52.EL.x86_64.rpm
 Dependancies:
kernel-module-openafs-2.4.21-52.EL-1.2.13-15.17.SL.ia32e.rpm
kernel-module-openafs-2.4.21-52.EL-1.2.13-15.17.SL.x86_64.rpm
kernel-module-openafs-2.4.21-52.ELsmp-1.2.13-15.17.SL.x86_64.rpm

SL 4.x

 SRPMS:
kernel-2.6.9-55.0.9.EL.src.rpm

 i386:
kernel-2.6.9-55.0.9.EL.i686.rpm
kernel-devel-2.6.9-55.0.9.EL.i686.rpm
kernel-doc-2.6.9-55.0.9.EL.noarch.rpm
kernel-hugemem-2.6.9-55.0.9.EL.i686.rpm
kernel-hugemem-devel-2.6.9-55.0.9.EL.i686.rpm
kernel-smp-2.6.9-55.0.9.EL.i686.rpm
kernel-smp-devel-2.6.9-55.0.9.EL.i686.rpm
kernel-xenU-2.6.9-55.0.9.EL.i686.rpm
kernel-xenU-devel-2.6.9-55.0.9.EL.i686.rpm
 Dependancies:
kernel-module-fuse-2.6.9-55.0.9.EL-2.5.3-1.SL.i686.rpm
kernel-module-fuse-2.6.9-55.0.9.ELhugemem-2.5.3-1.SL.i686.rpm
kernel-module-fuse-2.6.9-55.0.9.ELsmp-2.5.3-1.SL.i686.rpm
kernel-module-fuse-2.6.9-55.0.9.ELxenU-2.5.3-1.SL.i686.rpm
kernel-module-ipw3945-2.6.9-55.0.9.EL-1.1.0-1.SL4.i686.rpm
kernel-module-ipw3945-2.6.9-55.0.9.ELhugemem-1.1.0-1.SL4.i686.rpm
kernel-module-ipw3945-2.6.9-55.0.9.ELsmp-1.1.0-1.SL4.i686.rpm
kernel-module-ipw3945-2.6.9-55.0.9.ELxenU-1.1.0-1.SL4.i686.rpm
kernel-module-madwifi-2.6.9-55.0.9.EL-0.9.3.1-10.sl4.i686.rpm
kernel-module-madwifi-2.6.9-55.0.9.ELhugemem-0.9.3.1-10.sl4.i686.rpm
kernel-module-madwifi-2.6.9-55.0.9.ELsmp-0.9.3.1-10.sl4.i686.rpm
kernel-module-madwifi-hal-2.6.9-55.0.9.EL-0.9.3.1-10.sl4.i686.rpm
kernel-module-madwifi-hal-2.6.9-55.0.9.ELhugemem-0.9.3.1-10.sl4.i686.rpm
kernel-module-madwifi-hal-2.6.9-55.0.9.ELsmp-0.9.3.1-10.sl4.i686.rpm
kernel-module-ndiswrapper-2.6.9-55.0.9.EL-1.41-1.SL.i686.rpm
kernel-module-ndiswrapper-2.6.9-55.0.9.ELhugemem-1.41-1.SL.i686.rpm
kernel-module-ndiswrapper-2.6.9-55.0.9.ELsmp-1.41-1.SL.i686.rpm
kernel-module-ndiswrapper-2.6.9-55.0.9.ELxenU-1.41-1.SL.i686.rpm
kernel-module-openafs-2.6.9-55.0.9.EL-1.4.4-46.SL4.i686.rpm
kernel-module-openafs-2.6.9-55.0.9.ELhugemem-1.4.4-46.SL4.i686.rpm
kernel-module-openafs-2.6.9-55.0.9.ELsmp-1.4.4-46.SL4.i686.rpm
kernel-module-openafs-2.6.9-55.0.9.ELxenU-1.4.4-46.SL4.i686.rpm
kernel-module-r1000-2.6.9-55.0.9.EL-2.2-2.SL4x.i686.rpm
kernel-module-r1000-2.6.9-55.0.9.ELhugemem-2.2-2.SL4x.i686.rpm
kernel-module-r1000-2.6.9-55.0.9.ELsmp-2.2-2.SL4x.i686.rpm
kernel-module-r1000-2.6.9-55.0.9.ELxenU-2.2-2.SL4x.i686.rpm

 x86_64:
kernel-2.6.9-55.0.9.EL.x86_64.rpm
kernel-devel-2.6.9-55.0.9.EL.x86_64.rpm
kernel-doc-2.6.9-55.0.9.EL.noarch.rpm
kernel-largesmp-2.6.9-55.0.9.EL.x86_64.rpm
kernel-largesmp-devel-2.6.9-55.0.9.EL.x86_64.rpm
kernel-smp-2.6.9-55.0.9.EL.x86_64.rpm
kernel-smp-devel-2.6.9-55.0.9.EL.x86_64.rpm
kernel-xenU-2.6.9-55.0.9.EL.x86_64.rpm
kernel-xenU-devel-2.6.9-55.0.9.EL.x86_64.rpm
 Dependancies:
kernel-module-fuse-2.6.9-55.0.9.EL-2.5.3-1.SL.x86_64.rpm
kernel-module-fuse-2.6.9-55.0.9.ELlargesmp-2.5.3-1.SL.x86_64.rpm
kernel-module-fuse-2.6.9-55.0.9.ELsmp-2.5.3-1.SL.x86_64.rpm
kernel-module-fuse-2.6.9-55.0.9.ELxenU-2.5.3-1.SL.x86_64.rpm
kernel-module-ipw3945-2.6.9-55.0.9.EL-1.1.0-1.SL4.x86_64.rpm
kernel-module-ipw3945-2.6.9-55.0.9.ELlargesmp-1.1.0-1.SL4.x86_64.rpm
kernel-module-ipw3945-2.6.9-55.0.9.ELsmp-1.1.0-1.SL4.x86_64.rpm
kernel-module-ipw3945-2.6.9-55.0.9.ELxenU-1.1.0-1.SL4.x86_64.rpm
kernel-module-madwifi-2.6.9-55.0.9.EL-0.9.3.1-10.sl4.x86_64.rpm
kernel-module-madwifi-2.6.9-55.0.9.ELlargesmp-0.9.3.1-10.sl4.x86_64.rpm
kernel-module-madwifi-2.6.9-55.0.9.ELsmp-0.9.3.1-10.sl4.x86_64.rpm
kernel-module-madwifi-hal-2.6.9-55.0.9.EL-0.9.3.1-10.sl4.x86_64.rpm
kernel-module-madwifi-hal-2.6.9-55.0.9.ELlargesmp-0.9.3.1-10.sl4.x86_64.rpm
kernel-module-madwifi-hal-2.6.9-55.0.9.ELsmp-0.9.3.1-10.sl4.x86_64.rpm
kernel-module-ndiswrapper-2.6.9-55.0.9.EL-1.41-1.SL.x86_64.rpm
kernel-module-ndiswrapper-2.6.9-55.0.9.ELlargesmp-1.41-1.SL.x86_64.rpm
kernel-module-ndiswrapper-2.6.9-55.0.9.ELsmp-1.41-1.SL.x86_64.rpm
kernel-module-ndiswrapper-2.6.9-55.0.9.ELxenU-1.41-1.SL.x86_64.rpm
kernel-module-openafs-2.6.9-55.0.9.EL-1.4.4-46.SL4.x86_64.rpm
kernel-module-openafs-2.6.9-55.0.9.ELlargesmp-1.4.4-46.SL4.x86_64.rpm
kernel-module-openafs-2.6.9-55.0.9.ELsmp-1.4.4-46.SL4.x86_64.rpm
kernel-module-openafs-2.6.9-55.0.9.ELxenU-1.4.4-46.SL4.x86_64.rpm
kernel-module-r1000-2.6.9-55.0.9.EL-2.2-2.SL4x.x86_64.rpm
kernel-module-r1000-2.6.9-55.0.9.ELlargesmp-2.2-2.SL4x.x86_64.rpm
kernel-module-r1000-2.6.9-55.0.9.ELsmp-2.2-2.SL4x.x86_64.rpm
kernel-module-r1000-2.6.9-55.0.9.ELxenU-2.2-2.SL4x.x86_64.rpm

SL 5.x

 SRPMS:
kernel-2.6.18-8.1.14.el5.src.rpm

 i386:
kernel-2.6.18-8.1.14.el5.i686.rpm
kernel-devel-2.6.18-8.1.14.el5.i686.rpm
kernel-doc-2.6.18-8.1.14.el5.noarch.rpm
kernel-headers-2.6.18-8.1.14.el5.i386.rpm
kernel-PAE-2.6.18-8.1.14.el5.i686.rpm
kernel-PAE-devel-2.6.18-8.1.14.el5.i686.rpm
kernel-xen-2.6.18-8.1.14.el5.i686.rpm
kernel-xen-devel-2.6.18-8.1.14.el5.i686.rpm
 Dependancies:
kernel-module-fuse-2.6.18-8.1.14.el5-2.6.3-1.el5.i686.rpm
kernel-module-fuse-2.6.18-8.1.14.el5PAE-2.6.3-1.el5.i686.rpm
kernel-module-fuse-2.6.18-8.1.14.el5xen-2.6.3-1.el5.i686.rpm
kernel-module-ipw3945-2.6.18-8.1.14.el5-1.2.0-1.sl5.i686.rpm
kernel-module-ipw3945-2.6.18-8.1.14.el5PAE-1.2.0-1.sl5.i686.rpm
kernel-module-ipw3945-2.6.18-8.1.14.el5xen-1.2.0-1.sl5.i686.rpm
kernel-module-madwifi-2.6.18-8.1.14.el5-0.9.3.1-11.sl5.i686.rpm
kernel-module-madwifi-2.6.18-8.1.14.el5PAE-0.9.3.1-11.sl5.i686.rpm
kernel-module-madwifi-2.6.18-8.1.14.el5xen-0.9.3.1-11.sl5.i686.rpm
kernel-module-madwifi-hal-2.6.18-8.1.14.el5-0.9.3.1-11.sl5.i686.rpm
kernel-module-madwifi-hal-2.6.18-8.1.14.el5PAE-0.9.3.1-11.sl5.i686.rpm
kernel-module-madwifi-hal-2.6.18-8.1.14.el5xen-0.9.3.1-11.sl5.i686.rpm
kernel-module-ndiswrapper-2.6.18-8.1.14.el5-1.41-1.SL.i686.rpm
kernel-module-ndiswrapper-2.6.18-8.1.14.el5PAE-1.41-1.SL.i686.rpm
kernel-module-ndiswrapper-2.6.18-8.1.14.el5xen-1.41-1.SL.i686.rpm
kernel-module-openafs-2.6.18-8.1.14.el5-1.4.4-42.SL5.i686.rpm
kernel-module-openafs-2.6.18-8.1.14.el5PAE-1.4.4-42.SL5.i686.rpm
kernel-module-openafs-2.6.18-8.1.14.el5xen-1.4.4-42.SL5.i686.rpm
kernel-module-r1000-2.6.18-8.1.14.el5-1.05-1.sl.i686.rpm
kernel-module-r1000-2.6.18-8.1.14.el5PAE-1.05-1.sl.i686.rpm
kernel-module-r1000-2.6.18-8.1.14.el5xen-1.05-1.sl.i686.rpm

 x86_64:
kernel-2.6.18-8.1.14.el5.x86_64.rpm
kernel-devel-2.6.18-8.1.14.el5.x86_64.rpm
kernel-doc-2.6.18-8.1.14.el5.noarch.rpm
kernel-headers-2.6.18-8.1.14.el5.x86_64.rpm
kernel-xen-2.6.18-8.1.14.el5.x86_64.rpm
kernel-xen-devel-2.6.18-8.1.14.el5.x86_64.rpm
 Dependancies:
kernel-module-fuse-2.6.18-8.1.14.el5-2.6.3-1.SL.x86_64.rpm
kernel-module-fuse-2.6.18-8.1.14.el5xen-2.6.3-1.SL.x86_64.rpm
kernel-module-ipw3945-2.6.18-8.1.14.el5-1.2.0-1.sl5.x86_64.rpm
kernel-module-ipw3945-2.6.18-8.1.14.el5xen-1.2.0-1.sl5.x86_64.rpm
kernel-module-madwifi-2.6.18-8.1.14.el5-0.9.3.1-11.sl5.x86_64.rpm
kernel-module-madwifi-2.6.18-8.1.14.el5xen-0.9.3.1-11.sl5.x86_64.rpm
kernel-module-madwifi-hal-2.6.18-8.1.14.el5-0.9.3.1-11.sl5.x86_64.rpm
kernel-module-madwifi-hal-2.6.18-8.1.14.el5xen-0.9.3.1-11.sl5.x86_64.rpm
kernel-module-ndiswrapper-2.6.18-8.1.14.el5-1.41-1.SL.x86_64.rpm
kernel-module-ndiswrapper-2.6.18-8.1.14.el5xen-1.41-1.SL.x86_64.rpm
kernel-module-openafs-2.6.18-8.1.14.el5-1.4.4-42.SL5.x86_64.rpm
kernel-module-openafs-2.6.18-8.1.14.el5xen-1.4.4-42.SL5.x86_64.rpm
kernel-module-r1000-2.6.18-8.1.14.el5-1.05-1.sl.x86_64.rpm
kernel-module-r1000-2.6.18-8.1.14.el5xen-1.05-1.sl.x86_64.rpm

-Connie Sieh
-Troy Dawson
lastline

Powered By

Linux Security Footer

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!

Like staying secure? So do we.
Sign up for updates, tips, and alerts!

Your message here