security advisoryupdatekernel
Important: kernel security update. Date: Thu, 1 Nov 2007 16:54:53 -0500 Reply-To: Troy Dawson Sender: Security Errata for Scientific Linux From: Troy Dawson Subject: Security ERRATA for kernel on SL4.x i386/x86_64 Comments: To: This email address is being protected from spambots. You need JavaScript enabled to view it. Synopsis: Important: kernel security update Issue date: 2007-11-01 CVE Names: CVE-2006-6921 CVE-2007-2878 CVE-2007-3105 CVE-2007-3739 CVE-2007-3740 CVE-2007-3843 CVE-2007-3848 CVE-2007-4308 CVE-2007-4571 * A flaw was found in the handling of process death signals. This allowed a local user to send arbitrary signals to the suid-process executed by that user. A successful exploitation of this flaw depends on the structure of the suid-program and its signal handling. (CVE-2007-3848, Important) * A flaw was found in the CIFS file system. This could cause the umask values of a process to not be honored on CIFS file systems where UNIX extensions are supported. (CVE-2007-3740, Important) * A flaw was found in the VFAT compat ioctl handling on 64-bit systems. This allowed a local user to corrupt a kernel_dirent struct and cause a denial of service. (CVE-2007-2878, Important) * A flaw was found in the Advanced Linux Sound Architecture (ALSA). A local user who had the ability to read the /proc/driver/snd-page-alloc file could see portions of kernel memory. (CVE-2007-4571, Moderate) * A flaw was found in the aacraid SCSI driver. This allowed a local user to make ioctl calls to the driver that should be restricted to privileged users. (CVE-2007-4308, Moderate) * A flaw was found in the stack expansion when using the hugetlb kernel on PowerPC systems. This allowed a local user to cause a denial of service. (CVE-2007-3739, Moderate) * A flaw was found in the handling of zombie processes. A local user could create processes that would not be properly reaped which could lead to a denial of service. (CVE-2006-6921, Moderate) * A flaw was found in the CIFS file system handling. The mount option "sec=" did not enable integrity checking or produce an errormessage if used. (CVE-2007-3843, Low) * A flaw was found in the random number generator implementation that allowed a local user to cause a denial of service or possibly gain privileges. This flaw could be exploited if the root user raised the default wakeup threshold over the size of the output pool. (CVE-2007-3105, Low) Additionally, the following bugs were fixed: * A flaw was found in the kernel netpoll code, creating a potential deadlock condition. If the xmit_lock for a given network interface is held, and a subsequent netpoll event is generated from within the lock owning context (a console message for example), deadlock on that cpu will result, because the netpoll code will attempt to re-acquire the xmit_lock. The fix is to, in the netpoll code, only attempt to take the lock, and fail if it is already acquired (rather than block on it), and queue the message to be sent for later delivery. Any user of netpoll code in the kernel (netdump or netconsole services), is exposed to this problem, and should resolve the issue by upgrading to this kernel release immediately. * A flaw was found where, under 64-bit mode (x86_64), AMD processors were not able to address greater than a 40-bit physical address space; and Intel processors were only able to address up to a 36-bit physical address space. The fix is to increase the physical addressing for an AMD processor to 48 bits, and an Intel processor to 38 bits. * A flaw was found in the xenU kernel that may prevent a paravirtualized guest with more than one CPU from starting when running under an Scientific Linux 5.1 hypervisor. The fix is to allow your Scientific Linux 4 Xen SMP guests to boot under a 5.1 hypervisor. SL 4.x SRPMS: kernel-2.6.9-55.0.12.EL.src.rpm i386: kernel-2.6.9-55.0.12.EL.i686.rpm kernel-devel-2.6.9-55.0.12.EL.i686.rpm kernel-doc-2.6.9-55.0.12.EL.noarch.rpm kernel-hugemem-2.6.9-55.0.12.EL.i686.rpm kernel-hugemem-devel-2.6.9-55.0.12.EL.i686.rpm kernel-smp-2.6.9-55.0.12.EL.i686.rpm kernel-smp-devel-2.6.9-55.0.12.EL.i686.rpm kernel-xenU-2.6.9-55.0.12.EL.i686.rpm kernel-xenU-devel-2.6.9-55.0.12.EL.i686.rpm Dependancies: kernel-module-fuse-2.6.9-55.0.12.EL-2.5.3-1.SL.i686.rpm kernel-module-fuse-2.6.9-55.0.12.ELhugemem-2.5.3-1.SL.i686.rpm kernel-module-fuse-2.6.9-55.0.12.ELsmp-2.5.3-1.SL.i686.rpm kernel-module-fuse-2.6.9-55.0.12.ELxenU-2.5.3-1.SL.i686.rpm kernel-module-ipw3945-2.6.9-55.0.12.EL-1.1.0-1.SL4.i686.rpm kernel-module-ipw3945-2.6.9-55.0.12.ELhugemem-1.1.0-1.SL4.i686.rpm kernel-module-ipw3945-2.6.9-55.0.12.ELsmp-1.1.0-1.SL4.i686.rpm kernel-module-ipw3945-2.6.9-55.0.12.ELxenU-1.1.0-1.SL4.i686.rpm kernel-module-madwifi-2.6.9-55.0.12.EL-0.9.3.1-10.sl4.i686.rpm kernel-module-madwifi-2.6.9-55.0.12.ELhugemem-0.9.3.1-10.sl4.i686.rpm kernel-module-madwifi-2.6.9-55.0.12.ELsmp-0.9.3.1-10.sl4.i686.rpm kernel-module-madwifi-hal-2.6.9-55.0.12.EL-0.9.3.1-10.sl4.i686.rpm kernel-module-madwifi-hal-2.6.9-55.0.12.ELhugemem-0.9.3.1-10.sl4.i686.rpm kernel-module-madwifi-hal-2.6.9-55.0.12.ELsmp-0.9.3.1-10.sl4.i686.rpm kernel-module-ndiswrapper-2.6.9-55.0.12.EL-1.41-1.SL.i686.rpm kernel-module-ndiswrapper-2.6.9-55.0.12.ELhugemem-1.41-1.SL.i686.rpm kernel-module-ndiswrapper-2.6.9-55.0.12.ELsmp-1.41-1.SL.i686.rpm kernel-module-ndiswrapper-2.6.9-55.0.12.ELxenU-1.41-1.SL.i686.rpm kernel-module-openafs-2.6.9-55.0.12.EL-1.4.4-46.SL4.i686.rpm kernel-module-openafs-2.6.9-55.0.12.ELhugemem-1.4.4-46.SL4.i686.rpm kernel-module-openafs-2.6.9-55.0.12.ELsmp-1.4.4-46.SL4.i686.rpm kernel-module-openafs-2.6.9-55.0.12.ELxenU-1.4.4-46.SL4.i686.rpm kernel-module-r1000-2.6.9-55.0.12.EL-2.2-2.SL4x.i686.rpm kernel-module-r1000-2.6.9-55.0.12.ELhugemem-2.2-2.SL4x.i686.rpm kernel-module-r1000-2.6.9-55.0.12.ELsmp-2.2-2.SL4x.i686.rpm kernel-module-r1000-2.6.9-55.0.12.ELxenU-2.2-2.SL4x.i686.rpm x86_64: kernel-2.6.9-55.0.12.EL.x86_64.rpm kernel-devel-2.6.9-55.0.12.EL.x86_64.rpm kernel-doc-2.6.9-55.0.12.EL.noarch.rpm kernel-largesmp-2.6.9-55.0.12.EL.x86_64.rpm kernel-largesmp-devel-2.6.9-55.0.12.EL.x86_64.rpm kernel-smp-2.6.9-55.0.12.EL.x86_64.rpm kernel-smp-devel-2.6.9-55.0.12.EL.x86_64.rpm kernel-xenU-2.6.9-55.0.12.EL.x86_64.rpm kernel-xenU-devel-2.6.9-55.0.12.EL.x86_64.rpm Dependancies: kernel-module-fuse-2.6.9-55.0.12.EL-2.5.3-1.SL.x86_64.rpm kernel-module-fuse-2.6.9-55.0.12.ELlargesmp-2.5.3-1.SL.x86_64.rpm kernel-module-fuse-2.6.9-55.0.12.ELsmp-2.5.3-1.SL.x86_64.rpm kernel-module-fuse-2.6.9-55.0.12.ELxenU-2.5.3-1.SL.x86_64.rpm kernel-module-ipw3945-2.6.9-55.0.12.EL-1.1.0-1.SL4.x86_64.rpm kernel-module-ipw3945-2.6.9-55.0.12.ELlargesmp-1.1.0-1.SL4.x86_64.rpm kernel-module-ipw3945-2.6.9-55.0.12.ELsmp-1.1.0-1.SL4.x86_64.rpm kernel-module-ipw3945-2.6.9-55.0.12.ELxenU-1.1.0-1.SL4.x86_64.rpm kernel-module-madwifi-2.6.9-55.0.12.EL-0.9.3.1-10.sl4.x86_64.rpm kernel-module-madwifi-2.6.9-55.0.12.ELlargesmp-0.9.3.1-10.sl4.x86_64.rpm kernel-module-madwifi-2.6.9-55.0.12.ELsmp-0.9.3.1-10.sl4.x86_64.rpm kernel-module-madwifi-hal-2.6.9-55.0.12.EL-0.9.3.1-10.sl4.x86_64.rpm kernel-module-madwifi-hal-2.6.9-55.0.12.ELlargesmp-0.9.3.1-10.sl4.x86_64.rpm kernel-module-madwifi-hal-2.6.9-55.0.12.ELsmp-0.9.3.1-10.sl4.x86_64.rpm kernel-module-ndiswrapper-2.6.9-55.0.12.EL-1.41-1.SL.x86_64.rpm kernel-module-ndiswrapper-2.6.9-55.0.12.ELlargesmp-1.41-1.SL.x86_64.rpm kernel-module-ndiswrapper-2.6.9-55.0.12.ELsmp-1.41-1.SL.x86_64.rpm kernel-module-ndiswrapper-2.6.9-55.0.12.ELxenU-1.41-1.SL.x86_64.rpm kernel-module-openafs-2.6.9-55.0.12.EL-1.4.4-46.SL4.x86_64.rpm kernel-module-openafs-2.6.9-55.0.12.ELlargesmp-1.4.4-46.SL4.x86_64.rpm kernel-module-openafs-2.6.9-55.0.12.ELsmp-1.4.4-46.SL4.x86_64.rpm kernel-module-openafs-2.6.9-55.0.12.ELxenU-1.4.4-46.SL4.x86_64.rpm kernel-module-r1000-2.6.9-55.0.12.EL-2.2-2.SL4x.x86_64.rpm kernel-module-r1000-2.6.9-55.0.12.ELlargesmp-2.2-2.SL4x.x86_64.rpm kernel-module-r1000-2.6.9-55.0.12.ELsmp-2.2-2.SL4x.x86_64.rpm kernel-module-r1000-2.6.9-55.0.12.ELxenU-2.2-2.SL4x.x86_64.rpm NOTE: At the time of this writting, The Upstream Vendor had not released the source rpm's for the GFS kernel modules. When they do, we will recompile them and push them out. But we felt it was better to get the kernel out as soon as possible. -Connie Sieh -Troy Dawson . Core system enhancement patch forScientific Linux SL4.x, resolving multiple vulnerabilities to fortify overall security.. Kernel Security Update, Scientific Linux, Process Handling, CIFS Issues. . Severity: Important. LinuxSecurity.com Team
Nov 01, 2007
•Important
Scientific Linux
Refine advisories
