Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 544
Alerts This Week
Warning Icon 1 544

Scientific Linux 6.x Advisory: Severe Kernel Security Flaw - CVE-2017-6074

Calendar Feb 23, 2017 • User Avatar LinuxSecurity Advisories
2 - 3 min read
Scientific Large Esm H446
Topics%20covered

Topics Covered

security advisory kernel update important use-after-free escalation risk Scientific Linux
Important: kernel security update 
Date: Thu, 23 Feb 2017 22:58:56 -0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Connie Sieh 
Subject: Security ERRATA Important: kernel on SL6.x i386/x86_64
MIME-Version: 1.0
Message-ID: <20170223225856.16218.47439@slpackages.fnal.gov>

Synopsis: Important: kernel security update
Advisory ID: SLSA-2017:0293-1
Issue Date: 2017-02-22
CVE Numbers: CVE-2017-6074
--

Security Fix(es):

* A use-after-free flaw was found in the way the Linux kernel's Datagram
Congestion Control Protocol (DCCP) implementation freed SKB (socket
buffer) resources for a DCCP_PKT_REQUEST packet when the IPV6_RECVPKTINFO
option is set on the socket. A local, unprivileged user could use this
flaw to alter the kernel memory, allowing them to escalate their
privileges on the system. (CVE-2017-6074, Important)
--

SL6
 x86_64
 kernel-2.6.32-642.13.2.el6.x86_64.rpm
 kernel-debug-2.6.32-642.13.2.el6.x86_64.rpm
 kernel-debug-debuginfo-2.6.32-642.13.2.el6.i686.rpm
 kernel-debug-debuginfo-2.6.32-642.13.2.el6.x86_64.rpm
 kernel-debug-devel-2.6.32-642.13.2.el6.i686.rpm
 kernel-debug-devel-2.6.32-642.13.2.el6.x86_64.rpm
 kernel-debuginfo-2.6.32-642.13.2.el6.i686.rpm
 kernel-debuginfo-2.6.32-642.13.2.el6.x86_64.rpm
 kernel-debuginfo-common-i686-2.6.32-642.13.2.el6.i686.rpm
 kernel-debuginfo-common-x86_64-2.6.32-642.13.2.el6.x86_64.rpm
 kernel-devel-2.6.32-642.13.2.el6.x86_64.rpm
 kernel-headers-2.6.32-642.13.2.el6.x86_64.rpm
 perf-2.6.32-642.13.2.el6.x86_64.rpm
 perf-debuginfo-2.6.32-642.13.2.el6.i686.rpm
 perf-debuginfo-2.6.32-642.13.2.el6.x86_64.rpm
 python-perf-debuginfo-2.6.32-642.13.2.el6.i686.rpm
 python-perf-debuginfo-2.6.32-642.13.2.el6.x86_64.rpm
 python-perf-2.6.32-642.13.2.el6.x86_64.rpm
 i386
 kernel-2.6.32-642.13.2.el6.i686.rpm
 kernel-debug-2.6.32-642.13.2.el6.i686.rpm
 kernel-debug-debuginfo-2.6.32-642.13.2.el6.i686.rpm
 kernel-debug-devel-2.6.32-642.13.2.el6.i686.rpm
 kernel-debuginfo-2.6.32-642.13.2.el6.i686.rpm
 kernel-debuginfo-common-i686-2.6.32-642.13.2.el6.i686.rpm
 kernel-devel-2.6.32-642.13.2.el6.i686.rpm
 kernel-headers-2.6.32-642.13.2.el6.i686.rpm
 perf-2.6.32-642.13.2.el6.i686.rpm
 perf-debuginfo-2.6.32-642.13.2.el6.i686.rpm
 python-perf-debuginfo-2.6.32-642.13.2.el6.i686.rpm
 python-perf-2.6.32-642.13.2.el6.i686.rpm
 noarch
 kernel-abi-whitelists-2.6.32-642.13.2.el6.noarch.rpm
 kernel-doc-2.6.32-642.13.2.el6.noarch.rpm
 kernel-firmware-2.6.32-642.13.2.el6.noarch.rpm

- Scientific Linux Development Team