Science Linux SL5: Important Kernel Security Update for CVE-2012-2136

Date: Thu, 31 May 2012 13:50:04 -0500
Reply-To: This email address is being protected from spambots. You need JavaScript enabled to view it.
Sender: Security Errata for Scientific Linux
 
From: Patrick Riehecky 
Subject: Security ERRATA Important: kernel on SL5.x i386/x86_64
Comments: To: This email address is being protected from spambots. You need JavaScript enabled to view it.

Synopsis: Important: kernel security and bug fix update
Issue Date: 2012-05-29
CVE Numbers: CVE-2012-2136

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

This update fixes the following security issue:

* It was found that the data_len parameter of the sock_alloc_send_pskb()
function in the Linux kernel's networking implementation was not validated
before use. A local user with access to a TUN/TAP virtual interface could
use this flaw to crash the system or, potentially, escalate their
privileges. Note that unprivileged users cannot access TUN/TAP devices
until the root user grants them access. (CVE-2012-2136, Important)

We have also posted updated kernel-module-* packages corresponding to
this kernel version.

The system must be rebooted for this update to take effect.

SL5:
 i386
 kernel-2.6.18-308.8.1.el5.i686.rpm
 kernel-debug-2.6.18-308.8.1.el5.i686.rpm
 kernel-debug-debuginfo-2.6.18-308.8.1.el5.i686.rpm
 kernel-debug-devel-2.6.18-308.8.1.el5.i686.rpm
 kernel-debuginfo-2.6.18-308.8.1.el5.i686.rpm
 kernel-debuginfo-common-2.6.18-308.8.1.el5.i686.rpm
 kernel-devel-2.6.18-308.8.1.el5.i686.rpm
 kernel-headers-2.6.18-308.8.1.el5.i386.rpm
 kernel-PAE-2.6.18-308.8.1.el5.i686.rpm
 kernel-PAE-debuginfo-2.6.18-308.8.1.el5.i686.rpm
 kernel-PAE-devel-2.6.18-308.8.1.el5.i686.rpm
 kernel-xen-2.6.18-308.8.1.el5.i686.rpm
 kernel-xen-debuginfo-2.6.18-308.8.1.el5.i686.rpm
 kernel-xen-devel-2.6.18-308.8.1.el5.i686.rpm
 noarch
 kernel-doc-2.6.18-308.8.1.el5.noarch.rpm
 x86_64
 kernel-2.6.18-308.8.1.el5.x86_64.rpm
 kernel-debug-2.6.18-308.8.1.el5.x86_64.rpm
 kernel-debug-debuginfo-2.6.18-308.8.1.el5.x86_64.rpm
 kernel-debug-devel-2.6.18-308.8.1.el5.x86_64.rpm
 kernel-debuginfo-2.6.18-308.8.1.el5.x86_64.rpm
 kernel-debuginfo-common-2.6.18-308.8.1.el5.x86_64.rpm
 kernel-devel-2.6.18-308.8.1.el5.x86_64.rpm
 kernel-headers-2.6.18-308.8.1.el5.x86_64.rpm
 kernel-xen-2.6.18-308.8.1.el5.x86_64.rpm
 kernel-xen-debuginfo-2.6.18-308.8.1.el5.x86_64.rpm
 kernel-xen-devel-2.6.18-308.8.1.el5.x86_64.rpm

- Scientific Linux Development Team
lastline