Synopsis

kernel security update

Type/Severity

Security Advisory: Important

Topic

Updated kernel packages that fix several security issues and a page
attribute mapping bug are now available for Red Hat Enterprise Linux 4.

This update has been rated as having important security impact by the
Red Hat Security Response Team.

Description

The Linux kernel handles the basic functions of the operating system.

An issue was discovered that affects how page attributes are changed by the
kernel. Video drivers, which sometimes map kernel pages with a different
caching policy than write-back, are now expected to function correctly.
This change affects the x86, AMD64, and Intel EM64T architectures.

In addition the following security bugs were fixed:

The set_mempolicy system call did not check for negative numbers in the
policy field. An unprivileged local user could use this flaw to cause a
denial of service (system panic). (CVE-2005-3053)

A flaw in ioremap handling on AMD 64 and Intel EM64T systems. An
unprivileged local user could use this flaw to cause a denial of service or
minor information leak. (CVE-2005-3108)

A race condition in the ebtables netfilter module. On a SMP system that is
operating under a heavy load this flaw may allow remote attackers to cause
a denial of service (crash). (CVE-2005-3110)

A memory leak was found in key handling. An unprivileged local user could
use this flaw to cause a denial of service. (CVE-2005-3119)

A flaw in the Orinoco wireless driver. On systems running the vulnerable
drive, a remote attacker could send carefully crafted packets which would
divulge the contents of uninitialized kernel memory. (CVE-2005-3180)

A memory leak was found in the audit system. An unprivileged local user
could use this flaw to cause a denial of service. (CVE-2005-3181)

All Red Hat Enterprise Linux 4 users are advised to upgrade their kernels
to the packages associated with their machine architectures and
configurations as listed in this erratum.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied. Use Red Hat
Network to download and update your packages. To launch the Red Hat
Update Agent, use the following command:

up2date

For information on how to install packages manually, refer to the
following Web page for the System Administration or Customization
guide specific to your system:

http://www.redhat.com/docs/manuals/enterprise/

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 160135 - kernel panic in ioremap with four 1GB DIMMs (2.6.9-11.ELsmp)
• BZ - 168217 - CAN-2005-3108 [RHEL 4] ioremap_nocache causes panic, only on one motherboard, not on upstream 2.6.12.5 or later at least
• BZ - 168936 - System instability when using the NVIDIA driver (i.e bad caching on address)
• BZ - 168993 - CAN-2005-3053 RHEL 4 sys_set_mempolicy allows invalid policy leading to panic
• BZ - 170264 - CAN-2005-3108 ioremap x86_64 DoS
• BZ - 170268 - CAN-2005-3110 ebtables race
• BZ - 170274 - CAN-2005-3119 config_keys memleak
• BZ - 170277 - CAN-2005-3180 orinoco driver information leakage
• BZ - 170283 - CAN-2005-3181 names_cache memory leak
• BZ - 170563 - kernel crash in HP Compaq dc7100 CMT(DX438AV)
• BZ - 171154 - RHEL4 [NETFILTER]: Fix deadlock in ip4_queue.

CVEs

• CVE-2005-3180
• CVE-2005-3119
• CVE-2005-3108
• CVE-2005-3053
• CVE-2005-3110
• CVE-2005-3181

References

(none)

Red Hat Enterprise Linux Server 4

SRPM
kernel-2.6.9-22.0.1.EL.src.rpm	SHA-256: 81087c96b944bdb7c8b55832c853bfb031cfce351067761c20f9c618caeef14a
x86_64
kernel-2.6.9-22.0.1.EL.x86_64.rpm	SHA-256: a6f52e5b2aa9daf74479a248a776db23c98d25b3688b1d338083921307ddc9b8
kernel-2.6.9-22.0.1.EL.x86_64.rpm	SHA-256: a6f52e5b2aa9daf74479a248a776db23c98d25b3688b1d338083921307ddc9b8
kernel-devel-2.6.9-22.0.1.EL.x86_64.rpm	SHA-256: 60f1c1eda1d37f3cea08618119b6e1f996f6db626afe3104b800c6d5b017f059
kernel-devel-2.6.9-22.0.1.EL.x86_64.rpm	SHA-256: 60f1c1eda1d37f3cea08618119b6e1f996f6db626afe3104b800c6d5b017f059
kernel-doc-2.6.9-22.0.1.EL.noarch.rpm	SHA-256: 455e8267d90891a014c2dbf7ac2953d268aa0c38116a283413a3cc668aadf458
kernel-doc-2.6.9-22.0.1.EL.noarch.rpm	SHA-256: 455e8267d90891a014c2dbf7ac2953d268aa0c38116a283413a3cc668aadf458
kernel-smp-2.6.9-22.0.1.EL.x86_64.rpm	SHA-256: 2249608f069ffc05044b973bcbdb99c1e11e4f86c287053ac6f7f006bfbbabc2
kernel-smp-2.6.9-22.0.1.EL.x86_64.rpm	SHA-256: 2249608f069ffc05044b973bcbdb99c1e11e4f86c287053ac6f7f006bfbbabc2
kernel-smp-devel-2.6.9-22.0.1.EL.x86_64.rpm	SHA-256: 354e1a9035f31eafa9bbcef3be6d740172936f2f051188b0e4a22038ae70d48d
kernel-smp-devel-2.6.9-22.0.1.EL.x86_64.rpm	SHA-256: 354e1a9035f31eafa9bbcef3be6d740172936f2f051188b0e4a22038ae70d48d
ia64
kernel-2.6.9-22.0.1.EL.ia64.rpm	SHA-256: 91dde04a4b8cbda58c7c25baf87b7f684016148de578c1c98bbabdfe4b2e754b
kernel-2.6.9-22.0.1.EL.ia64.rpm	SHA-256: 91dde04a4b8cbda58c7c25baf87b7f684016148de578c1c98bbabdfe4b2e754b
kernel-devel-2.6.9-22.0.1.EL.ia64.rpm	SHA-256: ae059d1356268dacab8ba96b02df822f1d951b640f598003bd35993cd2ecceb9
kernel-devel-2.6.9-22.0.1.EL.ia64.rpm	SHA-256: ae059d1356268dacab8ba96b02df822f1d951b640f598003bd35993cd2ecceb9
kernel-doc-2.6.9-22.0.1.EL.noarch.rpm	SHA-256: 455e8267d90891a014c2dbf7ac2953d268aa0c38116a283413a3cc668aadf458
kernel-doc-2.6.9-22.0.1.EL.noarch.rpm	SHA-256: 455e8267d90891a014c2dbf7ac2953d268aa0c38116a283413a3cc668aadf458
i386
kernel-2.6.9-22.0.1.EL.i686.rpm	SHA-256: 5255042720c535dbd39c698b82f22c3223bf59ef503278fb604568bbba4ef94e
kernel-2.6.9-22.0.1.EL.i686.rpm	SHA-256: 5255042720c535dbd39c698b82f22c3223bf59ef503278fb604568bbba4ef94e
kernel-devel-2.6.9-22.0.1.EL.i686.rpm	SHA-256: a2a0d3f318665823e43a5a2036484cb1db0fd2d4d2f5626d3273a42821b94c6c
kernel-devel-2.6.9-22.0.1.EL.i686.rpm	SHA-256: a2a0d3f318665823e43a5a2036484cb1db0fd2d4d2f5626d3273a42821b94c6c
kernel-doc-2.6.9-22.0.1.EL.noarch.rpm	SHA-256: 455e8267d90891a014c2dbf7ac2953d268aa0c38116a283413a3cc668aadf458
kernel-doc-2.6.9-22.0.1.EL.noarch.rpm	SHA-256: 455e8267d90891a014c2dbf7ac2953d268aa0c38116a283413a3cc668aadf458
kernel-hugemem-2.6.9-22.0.1.EL.i686.rpm	SHA-256: 742c1d5ce3cbeae44b93afd7749bb75d5279433095b4eb81e81be74dc778b2fd
kernel-hugemem-2.6.9-22.0.1.EL.i686.rpm	SHA-256: 742c1d5ce3cbeae44b93afd7749bb75d5279433095b4eb81e81be74dc778b2fd
kernel-hugemem-devel-2.6.9-22.0.1.EL.i686.rpm	SHA-256: 32e54d6ac2dc21a203b1ebc72167df29adea416b117c9388c10fb64bf182dec3
kernel-hugemem-devel-2.6.9-22.0.1.EL.i686.rpm	SHA-256: 32e54d6ac2dc21a203b1ebc72167df29adea416b117c9388c10fb64bf182dec3
kernel-smp-2.6.9-22.0.1.EL.i686.rpm	SHA-256: ce7867f8f9ae5b1e2913f1a06d480fced03b008974de61d90061557f8526cbe7
kernel-smp-2.6.9-22.0.1.EL.i686.rpm	SHA-256: ce7867f8f9ae5b1e2913f1a06d480fced03b008974de61d90061557f8526cbe7
kernel-smp-devel-2.6.9-22.0.1.EL.i686.rpm	SHA-256: 9120d32f28c2b6faf072858a6aca65938475251294f60d49604c8ea34359b17b
kernel-smp-devel-2.6.9-22.0.1.EL.i686.rpm	SHA-256: 9120d32f28c2b6faf072858a6aca65938475251294f60d49604c8ea34359b17b

Red Hat Enterprise Linux Workstation 4

SRPM
kernel-2.6.9-22.0.1.EL.src.rpm	SHA-256: 81087c96b944bdb7c8b55832c853bfb031cfce351067761c20f9c618caeef14a
x86_64
kernel-2.6.9-22.0.1.EL.x86_64.rpm	SHA-256: a6f52e5b2aa9daf74479a248a776db23c98d25b3688b1d338083921307ddc9b8
kernel-devel-2.6.9-22.0.1.EL.x86_64.rpm	SHA-256: 60f1c1eda1d37f3cea08618119b6e1f996f6db626afe3104b800c6d5b017f059
kernel-doc-2.6.9-22.0.1.EL.noarch.rpm	SHA-256: 455e8267d90891a014c2dbf7ac2953d268aa0c38116a283413a3cc668aadf458
kernel-smp-2.6.9-22.0.1.EL.x86_64.rpm	SHA-256: 2249608f069ffc05044b973bcbdb99c1e11e4f86c287053ac6f7f006bfbbabc2
kernel-smp-devel-2.6.9-22.0.1.EL.x86_64.rpm	SHA-256: 354e1a9035f31eafa9bbcef3be6d740172936f2f051188b0e4a22038ae70d48d
ia64
kernel-2.6.9-22.0.1.EL.ia64.rpm	SHA-256: 91dde04a4b8cbda58c7c25baf87b7f684016148de578c1c98bbabdfe4b2e754b
kernel-devel-2.6.9-22.0.1.EL.ia64.rpm	SHA-256: ae059d1356268dacab8ba96b02df822f1d951b640f598003bd35993cd2ecceb9
kernel-doc-2.6.9-22.0.1.EL.noarch.rpm	SHA-256: 455e8267d90891a014c2dbf7ac2953d268aa0c38116a283413a3cc668aadf458
i386
kernel-2.6.9-22.0.1.EL.i686.rpm	SHA-256: 5255042720c535dbd39c698b82f22c3223bf59ef503278fb604568bbba4ef94e
kernel-devel-2.6.9-22.0.1.EL.i686.rpm	SHA-256: a2a0d3f318665823e43a5a2036484cb1db0fd2d4d2f5626d3273a42821b94c6c
kernel-doc-2.6.9-22.0.1.EL.noarch.rpm	SHA-256: 455e8267d90891a014c2dbf7ac2953d268aa0c38116a283413a3cc668aadf458
kernel-hugemem-2.6.9-22.0.1.EL.i686.rpm	SHA-256: 742c1d5ce3cbeae44b93afd7749bb75d5279433095b4eb81e81be74dc778b2fd
kernel-hugemem-devel-2.6.9-22.0.1.EL.i686.rpm	SHA-256: 32e54d6ac2dc21a203b1ebc72167df29adea416b117c9388c10fb64bf182dec3
kernel-smp-2.6.9-22.0.1.EL.i686.rpm	SHA-256: ce7867f8f9ae5b1e2913f1a06d480fced03b008974de61d90061557f8526cbe7
kernel-smp-devel-2.6.9-22.0.1.EL.i686.rpm	SHA-256: 9120d32f28c2b6faf072858a6aca65938475251294f60d49604c8ea34359b17b

Red Hat Enterprise Linux Desktop 4

SRPM
kernel-2.6.9-22.0.1.EL.src.rpm	SHA-256: 81087c96b944bdb7c8b55832c853bfb031cfce351067761c20f9c618caeef14a
x86_64
kernel-2.6.9-22.0.1.EL.x86_64.rpm	SHA-256: a6f52e5b2aa9daf74479a248a776db23c98d25b3688b1d338083921307ddc9b8
kernel-devel-2.6.9-22.0.1.EL.x86_64.rpm	SHA-256: 60f1c1eda1d37f3cea08618119b6e1f996f6db626afe3104b800c6d5b017f059
kernel-doc-2.6.9-22.0.1.EL.noarch.rpm	SHA-256: 455e8267d90891a014c2dbf7ac2953d268aa0c38116a283413a3cc668aadf458
kernel-smp-2.6.9-22.0.1.EL.x86_64.rpm	SHA-256: 2249608f069ffc05044b973bcbdb99c1e11e4f86c287053ac6f7f006bfbbabc2
kernel-smp-devel-2.6.9-22.0.1.EL.x86_64.rpm	SHA-256: 354e1a9035f31eafa9bbcef3be6d740172936f2f051188b0e4a22038ae70d48d
i386
kernel-2.6.9-22.0.1.EL.i686.rpm	SHA-256: 5255042720c535dbd39c698b82f22c3223bf59ef503278fb604568bbba4ef94e
kernel-devel-2.6.9-22.0.1.EL.i686.rpm	SHA-256: a2a0d3f318665823e43a5a2036484cb1db0fd2d4d2f5626d3273a42821b94c6c
kernel-doc-2.6.9-22.0.1.EL.noarch.rpm	SHA-256: 455e8267d90891a014c2dbf7ac2953d268aa0c38116a283413a3cc668aadf458
kernel-hugemem-2.6.9-22.0.1.EL.i686.rpm	SHA-256: 742c1d5ce3cbeae44b93afd7749bb75d5279433095b4eb81e81be74dc778b2fd
kernel-hugemem-devel-2.6.9-22.0.1.EL.i686.rpm	SHA-256: 32e54d6ac2dc21a203b1ebc72167df29adea416b117c9388c10fb64bf182dec3
kernel-smp-2.6.9-22.0.1.EL.i686.rpm	SHA-256: ce7867f8f9ae5b1e2913f1a06d480fced03b008974de61d90061557f8526cbe7
kernel-smp-devel-2.6.9-22.0.1.EL.i686.rpm	SHA-256: 9120d32f28c2b6faf072858a6aca65938475251294f60d49604c8ea34359b17b

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
kernel-2.6.9-22.0.1.EL.src.rpm	SHA-256: 81087c96b944bdb7c8b55832c853bfb031cfce351067761c20f9c618caeef14a
s390x
kernel-2.6.9-22.0.1.EL.s390x.rpm	SHA-256: f33112d6a8496926cf70a02cc204ac32058198edf4e56149d3b4f646d14da2ad
kernel-devel-2.6.9-22.0.1.EL.s390x.rpm	SHA-256: 66d7314d610237bd605138b238617f5d57e8679cb030da41954d43cd11e97083
kernel-doc-2.6.9-22.0.1.EL.noarch.rpm	SHA-256: 455e8267d90891a014c2dbf7ac2953d268aa0c38116a283413a3cc668aadf458
s390
kernel-2.6.9-22.0.1.EL.s390.rpm	SHA-256: 619957251fc08b58b2f7bf6250274a607f41596da95c8e4c22615a2ab77bf5e7
kernel-devel-2.6.9-22.0.1.EL.s390.rpm	SHA-256: a2acc243ec6a4b0d8c0e13a92f50d33c9d39be33fdb51638a7e300880c1a464d
kernel-doc-2.6.9-22.0.1.EL.noarch.rpm	SHA-256: 455e8267d90891a014c2dbf7ac2953d268aa0c38116a283413a3cc668aadf458

Red Hat Enterprise Linux for Power, big endian 4

SRPM
kernel-2.6.9-22.0.1.EL.src.rpm	SHA-256: 81087c96b944bdb7c8b55832c853bfb031cfce351067761c20f9c618caeef14a
ppc
kernel-2.6.9-22.0.1.EL.ppc64.rpm	SHA-256: 71770e502362b33c11057d6146587bc7fccbb6c75fc9e3a2997471a3a7ea541a
kernel-2.6.9-22.0.1.EL.ppc64iseries.rpm	SHA-256: 1990f1d5d1fd636e657c1c1ace8d76a03112ae0ee8c1fd0336415eb6809d876a
kernel-devel-2.6.9-22.0.1.EL.ppc64.rpm	SHA-256: 535dd49c209143df4d9c57bd105d4cf3a490702293c4ef3138d02f436e307d17
kernel-devel-2.6.9-22.0.1.EL.ppc64iseries.rpm	SHA-256: 95a2046c1e1a6439614a3f198d6ba9316ea51b0ddda5dbacce0b86435977b74b
kernel-doc-2.6.9-22.0.1.EL.noarch.rpm	SHA-256: 455e8267d90891a014c2dbf7ac2953d268aa0c38116a283413a3cc668aadf458