Scientific Linux: SLSA-2013:1348-1 Moderate Kernel Memory Issue

Date: Wed, 16 Oct 2013 15:10:35 +0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Moderate: Red Hat Enterprise Linux 5 kernel
 update on SL5.x i386/x86_64
MIME-Version: 1.0

Synopsis: Moderate: Red Hat Enterprise Linux 5 kernel update
Advisory ID: SLSA-2013:1348-1
Issue Date: 2013-09-30
CVE Numbers: CVE-2012-4398
--

This update fixes the following security issue:

It was found that a deadlock could occur in the Out of Memory (OOM)
killer. A process could trigger this deadlock by consuming a large amount
of memory, and then causing request_module() to be called. A local,
unprivileged user could use this flaw to cause a denial of service
(excessive memory consumption). (CVE-2012-4398, Moderate)

The system must be rebooted for this update to take effect.
--

SL5
 x86_64
 kernel-2.6.18-371.el5.x86_64.rpm
 kernel-debug-2.6.18-371.el5.x86_64.rpm
 kernel-debug-debuginfo-2.6.18-371.el5.x86_64.rpm
 kernel-debug-devel-2.6.18-371.el5.x86_64.rpm
 kernel-debuginfo-2.6.18-371.el5.x86_64.rpm
 kernel-debuginfo-common-2.6.18-371.el5.x86_64.rpm
 kernel-devel-2.6.18-371.el5.x86_64.rpm
 kernel-headers-2.6.18-371.el5.x86_64.rpm
 kernel-xen-2.6.18-371.el5.x86_64.rpm
 kernel-xen-debuginfo-2.6.18-371.el5.x86_64.rpm
 kernel-xen-devel-2.6.18-371.el5.x86_64.rpm
 i386
 kernel-2.6.18-371.el5.i686.rpm
 kernel-PAE-2.6.18-371.el5.i686.rpm
 kernel-PAE-debuginfo-2.6.18-371.el5.i686.rpm
 kernel-PAE-devel-2.6.18-371.el5.i686.rpm
 kernel-debug-2.6.18-371.el5.i686.rpm
 kernel-debug-debuginfo-2.6.18-371.el5.i686.rpm
 kernel-debug-devel-2.6.18-371.el5.i686.rpm
 kernel-debuginfo-2.6.18-371.el5.i686.rpm
 kernel-debuginfo-common-2.6.18-371.el5.i686.rpm
 kernel-devel-2.6.18-371.el5.i686.rpm
 kernel-headers-2.6.18-371.el5.i386.rpm
 kernel-xen-2.6.18-371.el5.i686.rpm
 kernel-xen-debuginfo-2.6.18-371.el5.i686.rpm
 kernel-xen-devel-2.6.18-371.el5.i686.rpm
 noarch
 kernel-doc-2.6.18-371.el5.noarch.rpm

- Scientific Linux Development Team