Synopsis

kernel security update

Type/Severity

Security Advisory: Important

Topic

Updated kernel packages that fix several security issues in the Red Hat
Enterprise Linux 4 kernel are now available.

This security advisory has been rated as having important security impact
by the Red Hat Security Response Team.

Description

The Linux kernel handles the basic functions of the operating system.

These new kernel packages contain fixes for the security issues described
below:

• a flaw in the proc file system that allowed a local user to use a
  suid-wrapper for scripts to gain root privileges (CVE-2006-3626, Important)
  
• a flaw in the SCTP implementation that allowed a local user to cause a
  denial of service (panic) or to possibly gain root privileges
  (CVE-2006-3745, Important)
  
• a flaw in NFS exported ext2/ext3 partitions when handling invalid inodes
  that allowed a remote authenticated user to cause a denial of service
  (filesystem panic) (CVE-2006-3468, Important)
  
• a flaw in the restore_all code path of the 4/4GB split support of
  non-hugemem kernels that allowed a local user to cause a denial of service
  (panic) (CVE-2006-2932, Important)
  
• a flaw in IPv4 netfilter handling for the unlikely use of SNMP NAT
  processing that allowed a remote user to cause a denial of service (crash)
  or potential memory corruption (CVE-2006-2444, Moderate)
  
• a flaw in the DVD handling of the CDROM driver that could be used
  together with a custom built USB device to gain root privileges
  (CVE-2006-2935, Moderate)
  
• a flaw in the handling of O_DIRECT writes that allowed a local user
  to cause a denial of service (memory consumption) (CVE-2004-2660, Low)
  
• a flaw in the SCTP chunk length handling that allowed a remote user to
  cause a denial of service (crash) (CVE-2006-1858, Low)
  
• a flaw in the input handling of the ftdi_sio driver that allowed a local
  user to cause a denial of service (memory consumption) (CVE-2006-2936, Low)
  

In addition a bugfix was added to enable a clean reboot for the IBM Pizzaro
machines.

Red Hat would like to thank Wei Wang of McAfee Avert Labs and Kirill
Korotaev for reporting issues fixed in this erratum.

All Red Hat Enterprise Linux 4 users are advised to upgrade their kernels
to the packages associated with their machine architectures and
configurations as listed in this erratum.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via Red Hat Network. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc

Fixes

• BZ - 191736 - CVE-2004-2660 O_DIRECT write sometimes leaks memory
• BZ - 192632 - CVE-2006-2444 SNMP NAT netfilter memory corruption
• BZ - 192636 - CVE-2006-1858 SCTP chunk length overflow
• BZ - 196280 - CVE-2006-2932 bogus %ds/%es security issue in restore_all
• BZ - 197610 - CVE-2006-2936 Possible DoS in write routine of ftdi_sio driver
• BZ - 197670 - CVE-2006-2935 Possible buffer overflow in DVD handling
• BZ - 198973 - CVE-2006-3626 Nasty /proc privilege escalation
• BZ - 199172 - CVE-2006-3468 Bogus FH in NFS request causes DoS in file system code
• BZ - 200111 - Can't reboot/halt on IBM Pizzaro machine
• BZ - 202122 - CVE-2006-3745 Local SCTP privilege escalation

CVEs

• CVE-2006-2444
• CVE-2006-3745
• CVE-2006-1858
• CVE-2006-3468
• CVE-2006-2936
• CVE-2006-2935
• CVE-2004-2660
• CVE-2006-2932
• CVE-2006-3626

References

• http://www.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server 4

SRPM
kernel-2.6.9-42.0.2.EL.src.rpm	SHA-256: f570260a6fe9bb26e67243856de7d9ea13ce8394460f57560fc9902e6da083e5
x86_64
kernel-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: 6c6514573ce2dc9a41ffba724d9ea2a6523222b652a350fd28bf1046916118c8
kernel-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: 6c6514573ce2dc9a41ffba724d9ea2a6523222b652a350fd28bf1046916118c8
kernel-devel-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: b06abcfd4a33bca9aace00caca38cbc72a5c8ad6cd090cd1ae6cefded36ffd20
kernel-devel-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: b06abcfd4a33bca9aace00caca38cbc72a5c8ad6cd090cd1ae6cefded36ffd20
kernel-doc-2.6.9-42.0.2.EL.noarch.rpm	SHA-256: ab2a0f7383b3e9db80e68eba3a4cc0cceb5c7d349abb9c5ae77aa5bea10999bf
kernel-doc-2.6.9-42.0.2.EL.noarch.rpm	SHA-256: ab2a0f7383b3e9db80e68eba3a4cc0cceb5c7d349abb9c5ae77aa5bea10999bf
kernel-largesmp-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: 47e2c00f42c359c0bfb8fd916fc5a646aede7567a19472387f34dd21fef59e75
kernel-largesmp-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: 47e2c00f42c359c0bfb8fd916fc5a646aede7567a19472387f34dd21fef59e75
kernel-largesmp-devel-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: 23fc0f37537684e0a6e3e2baa61c19b7e1633290307f41a008f643cb782c7c6e
kernel-largesmp-devel-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: 23fc0f37537684e0a6e3e2baa61c19b7e1633290307f41a008f643cb782c7c6e
kernel-smp-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: def0bb6795893ae422d033000c5d452099bd594a3e9845a63b3b176d12267d9d
kernel-smp-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: def0bb6795893ae422d033000c5d452099bd594a3e9845a63b3b176d12267d9d
kernel-smp-devel-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: d03e6101ee1d27a57f252dd52e2fe8a8b41af70094ca07a6459d2cee60712b51
kernel-smp-devel-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: d03e6101ee1d27a57f252dd52e2fe8a8b41af70094ca07a6459d2cee60712b51
ia64
kernel-2.6.9-42.0.2.EL.ia64.rpm	SHA-256: aeec483c0e2db64e4559238e1c886520975cc45f801291d5f17fdad71e50f301
kernel-2.6.9-42.0.2.EL.ia64.rpm	SHA-256: aeec483c0e2db64e4559238e1c886520975cc45f801291d5f17fdad71e50f301
kernel-devel-2.6.9-42.0.2.EL.ia64.rpm	SHA-256: 0fa052f5e4b76de89b8c06d407c466f33e44689cc2fb5f030392ace238f99e1b
kernel-devel-2.6.9-42.0.2.EL.ia64.rpm	SHA-256: 0fa052f5e4b76de89b8c06d407c466f33e44689cc2fb5f030392ace238f99e1b
kernel-doc-2.6.9-42.0.2.EL.noarch.rpm	SHA-256: ab2a0f7383b3e9db80e68eba3a4cc0cceb5c7d349abb9c5ae77aa5bea10999bf
kernel-doc-2.6.9-42.0.2.EL.noarch.rpm	SHA-256: ab2a0f7383b3e9db80e68eba3a4cc0cceb5c7d349abb9c5ae77aa5bea10999bf
kernel-largesmp-2.6.9-42.0.2.EL.ia64.rpm	SHA-256: e2bea8c0d23692a241f3259f029ae464ba1e6edf16b2bdb375d28de4ba0bde52
kernel-largesmp-2.6.9-42.0.2.EL.ia64.rpm	SHA-256: e2bea8c0d23692a241f3259f029ae464ba1e6edf16b2bdb375d28de4ba0bde52
kernel-largesmp-devel-2.6.9-42.0.2.EL.ia64.rpm	SHA-256: 43833eea9f7ecf52f7cd27bf62bb4dfdc5f9bf3219216ade5a4a0e4570a131f9
kernel-largesmp-devel-2.6.9-42.0.2.EL.ia64.rpm	SHA-256: 43833eea9f7ecf52f7cd27bf62bb4dfdc5f9bf3219216ade5a4a0e4570a131f9
i386
kernel-2.6.9-42.0.2.EL.i686.rpm	SHA-256: e8d6bcc30581331d11391a00e51eeaf09c0f838f569fec621b3810cf58d8e0ff
kernel-2.6.9-42.0.2.EL.i686.rpm	SHA-256: e8d6bcc30581331d11391a00e51eeaf09c0f838f569fec621b3810cf58d8e0ff
kernel-devel-2.6.9-42.0.2.EL.i686.rpm	SHA-256: 79e40d286db7a3bc9d03405aaa548ffddc9155ea4330903fded804d73c488c46
kernel-devel-2.6.9-42.0.2.EL.i686.rpm	SHA-256: 79e40d286db7a3bc9d03405aaa548ffddc9155ea4330903fded804d73c488c46
kernel-doc-2.6.9-42.0.2.EL.noarch.rpm	SHA-256: ab2a0f7383b3e9db80e68eba3a4cc0cceb5c7d349abb9c5ae77aa5bea10999bf
kernel-doc-2.6.9-42.0.2.EL.noarch.rpm	SHA-256: ab2a0f7383b3e9db80e68eba3a4cc0cceb5c7d349abb9c5ae77aa5bea10999bf
kernel-hugemem-2.6.9-42.0.2.EL.i686.rpm	SHA-256: c57d2fc2a1fdb9c17da4561b6cf0349cee6f98d395dd92cd938b6dd44b09d166
kernel-hugemem-2.6.9-42.0.2.EL.i686.rpm	SHA-256: c57d2fc2a1fdb9c17da4561b6cf0349cee6f98d395dd92cd938b6dd44b09d166
kernel-hugemem-devel-2.6.9-42.0.2.EL.i686.rpm	SHA-256: 2f9d65c9845cae8b49a6473c68406285d1f42d6df8606dd900820f5e2cf97178
kernel-hugemem-devel-2.6.9-42.0.2.EL.i686.rpm	SHA-256: 2f9d65c9845cae8b49a6473c68406285d1f42d6df8606dd900820f5e2cf97178
kernel-smp-2.6.9-42.0.2.EL.i686.rpm	SHA-256: bdd62d1f25181d01ba845f154a59e138c8aa4ece0fab1b5a2ce265e803c11b56
kernel-smp-2.6.9-42.0.2.EL.i686.rpm	SHA-256: bdd62d1f25181d01ba845f154a59e138c8aa4ece0fab1b5a2ce265e803c11b56
kernel-smp-devel-2.6.9-42.0.2.EL.i686.rpm	SHA-256: fc997e8db5994295f81c5b4cf4cbd4c26768d7bb530acce3e422ef8b088fadfe
kernel-smp-devel-2.6.9-42.0.2.EL.i686.rpm	SHA-256: fc997e8db5994295f81c5b4cf4cbd4c26768d7bb530acce3e422ef8b088fadfe

Red Hat Enterprise Linux Workstation 4

SRPM
kernel-2.6.9-42.0.2.EL.src.rpm	SHA-256: f570260a6fe9bb26e67243856de7d9ea13ce8394460f57560fc9902e6da083e5
x86_64
kernel-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: 6c6514573ce2dc9a41ffba724d9ea2a6523222b652a350fd28bf1046916118c8
kernel-devel-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: b06abcfd4a33bca9aace00caca38cbc72a5c8ad6cd090cd1ae6cefded36ffd20
kernel-doc-2.6.9-42.0.2.EL.noarch.rpm	SHA-256: ab2a0f7383b3e9db80e68eba3a4cc0cceb5c7d349abb9c5ae77aa5bea10999bf
kernel-largesmp-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: 47e2c00f42c359c0bfb8fd916fc5a646aede7567a19472387f34dd21fef59e75
kernel-largesmp-devel-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: 23fc0f37537684e0a6e3e2baa61c19b7e1633290307f41a008f643cb782c7c6e
kernel-smp-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: def0bb6795893ae422d033000c5d452099bd594a3e9845a63b3b176d12267d9d
kernel-smp-devel-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: d03e6101ee1d27a57f252dd52e2fe8a8b41af70094ca07a6459d2cee60712b51
ia64
kernel-2.6.9-42.0.2.EL.ia64.rpm	SHA-256: aeec483c0e2db64e4559238e1c886520975cc45f801291d5f17fdad71e50f301
kernel-devel-2.6.9-42.0.2.EL.ia64.rpm	SHA-256: 0fa052f5e4b76de89b8c06d407c466f33e44689cc2fb5f030392ace238f99e1b
kernel-doc-2.6.9-42.0.2.EL.noarch.rpm	SHA-256: ab2a0f7383b3e9db80e68eba3a4cc0cceb5c7d349abb9c5ae77aa5bea10999bf
kernel-largesmp-2.6.9-42.0.2.EL.ia64.rpm	SHA-256: e2bea8c0d23692a241f3259f029ae464ba1e6edf16b2bdb375d28de4ba0bde52
kernel-largesmp-devel-2.6.9-42.0.2.EL.ia64.rpm	SHA-256: 43833eea9f7ecf52f7cd27bf62bb4dfdc5f9bf3219216ade5a4a0e4570a131f9
i386
kernel-2.6.9-42.0.2.EL.i686.rpm	SHA-256: e8d6bcc30581331d11391a00e51eeaf09c0f838f569fec621b3810cf58d8e0ff
kernel-devel-2.6.9-42.0.2.EL.i686.rpm	SHA-256: 79e40d286db7a3bc9d03405aaa548ffddc9155ea4330903fded804d73c488c46
kernel-doc-2.6.9-42.0.2.EL.noarch.rpm	SHA-256: ab2a0f7383b3e9db80e68eba3a4cc0cceb5c7d349abb9c5ae77aa5bea10999bf
kernel-hugemem-2.6.9-42.0.2.EL.i686.rpm	SHA-256: c57d2fc2a1fdb9c17da4561b6cf0349cee6f98d395dd92cd938b6dd44b09d166
kernel-hugemem-devel-2.6.9-42.0.2.EL.i686.rpm	SHA-256: 2f9d65c9845cae8b49a6473c68406285d1f42d6df8606dd900820f5e2cf97178
kernel-smp-2.6.9-42.0.2.EL.i686.rpm	SHA-256: bdd62d1f25181d01ba845f154a59e138c8aa4ece0fab1b5a2ce265e803c11b56
kernel-smp-devel-2.6.9-42.0.2.EL.i686.rpm	SHA-256: fc997e8db5994295f81c5b4cf4cbd4c26768d7bb530acce3e422ef8b088fadfe

Red Hat Enterprise Linux Desktop 4

SRPM
kernel-2.6.9-42.0.2.EL.src.rpm	SHA-256: f570260a6fe9bb26e67243856de7d9ea13ce8394460f57560fc9902e6da083e5
x86_64
kernel-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: 6c6514573ce2dc9a41ffba724d9ea2a6523222b652a350fd28bf1046916118c8
kernel-devel-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: b06abcfd4a33bca9aace00caca38cbc72a5c8ad6cd090cd1ae6cefded36ffd20
kernel-doc-2.6.9-42.0.2.EL.noarch.rpm	SHA-256: ab2a0f7383b3e9db80e68eba3a4cc0cceb5c7d349abb9c5ae77aa5bea10999bf
kernel-largesmp-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: 47e2c00f42c359c0bfb8fd916fc5a646aede7567a19472387f34dd21fef59e75
kernel-largesmp-devel-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: 23fc0f37537684e0a6e3e2baa61c19b7e1633290307f41a008f643cb782c7c6e
kernel-smp-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: def0bb6795893ae422d033000c5d452099bd594a3e9845a63b3b176d12267d9d
kernel-smp-devel-2.6.9-42.0.2.EL.x86_64.rpm	SHA-256: d03e6101ee1d27a57f252dd52e2fe8a8b41af70094ca07a6459d2cee60712b51
i386
kernel-2.6.9-42.0.2.EL.i686.rpm	SHA-256: e8d6bcc30581331d11391a00e51eeaf09c0f838f569fec621b3810cf58d8e0ff
kernel-devel-2.6.9-42.0.2.EL.i686.rpm	SHA-256: 79e40d286db7a3bc9d03405aaa548ffddc9155ea4330903fded804d73c488c46
kernel-doc-2.6.9-42.0.2.EL.noarch.rpm	SHA-256: ab2a0f7383b3e9db80e68eba3a4cc0cceb5c7d349abb9c5ae77aa5bea10999bf
kernel-hugemem-2.6.9-42.0.2.EL.i686.rpm	SHA-256: c57d2fc2a1fdb9c17da4561b6cf0349cee6f98d395dd92cd938b6dd44b09d166
kernel-hugemem-devel-2.6.9-42.0.2.EL.i686.rpm	SHA-256: 2f9d65c9845cae8b49a6473c68406285d1f42d6df8606dd900820f5e2cf97178
kernel-smp-2.6.9-42.0.2.EL.i686.rpm	SHA-256: bdd62d1f25181d01ba845f154a59e138c8aa4ece0fab1b5a2ce265e803c11b56
kernel-smp-devel-2.6.9-42.0.2.EL.i686.rpm	SHA-256: fc997e8db5994295f81c5b4cf4cbd4c26768d7bb530acce3e422ef8b088fadfe

Red Hat Enterprise Linux for IBM z Systems 4

SRPM
kernel-2.6.9-42.0.2.EL.src.rpm	SHA-256: f570260a6fe9bb26e67243856de7d9ea13ce8394460f57560fc9902e6da083e5
s390x
kernel-2.6.9-42.0.2.EL.s390x.rpm	SHA-256: 9dadcdeeeb187b6182cd9ec2d52414bc642f4b4651d50c03b8a790c0915954fe
kernel-devel-2.6.9-42.0.2.EL.s390x.rpm	SHA-256: 03f8bdd33a2c3a239a82f369c69d1be3f267f91c34dfd10b4d1278b529133a95
kernel-doc-2.6.9-42.0.2.EL.noarch.rpm	SHA-256: ab2a0f7383b3e9db80e68eba3a4cc0cceb5c7d349abb9c5ae77aa5bea10999bf
s390
kernel-2.6.9-42.0.2.EL.s390.rpm	SHA-256: 685e1c327fe7dea4a93998ead033b18f79ac0354802eee5ed7e2be4b0368c9f5
kernel-devel-2.6.9-42.0.2.EL.s390.rpm	SHA-256: 202825c18ce9862bcc5c8a1e5bd117cfdc07348d9927950fa83ba7edfa14cdcf
kernel-doc-2.6.9-42.0.2.EL.noarch.rpm	SHA-256: ab2a0f7383b3e9db80e68eba3a4cc0cceb5c7d349abb9c5ae77aa5bea10999bf

Red Hat Enterprise Linux for Power, big endian 4

SRPM
kernel-2.6.9-42.0.2.EL.src.rpm	SHA-256: f570260a6fe9bb26e67243856de7d9ea13ce8394460f57560fc9902e6da083e5
ppc
kernel-2.6.9-42.0.2.EL.ppc64.rpm	SHA-256: f399a3a067a6b386d64f26f72c83c04325714550ca18f871100fc5ab1c471e84
kernel-2.6.9-42.0.2.EL.ppc64iseries.rpm	SHA-256: cf3533af10527762a5adccf13c2fbe083ac2da4552b3e974cbd6b808f9a0b027
kernel-devel-2.6.9-42.0.2.EL.ppc64.rpm	SHA-256: e0bbc5179ea5081907425b7a384b63dc6c70d799c0ad81cedcac0d921fd63ec5
kernel-devel-2.6.9-42.0.2.EL.ppc64iseries.rpm	SHA-256: b7c93ba21196356b8450d90d8c58e53cc5c127f1430910da6679a1436684bc01
kernel-doc-2.6.9-42.0.2.EL.noarch.rpm	SHA-256: ab2a0f7383b3e9db80e68eba3a4cc0cceb5c7d349abb9c5ae77aa5bea10999bf
kernel-largesmp-2.6.9-42.0.2.EL.ppc64.rpm	SHA-256: 415f6b4d5a84e3aa07f356cf7d9c39233e61703c739142ae3c3f5ef335b5beb4
kernel-largesmp-devel-2.6.9-42.0.2.EL.ppc64.rpm	SHA-256: 8ebe402ad0dcee9d04b81be839f32fd4353afee75ad656a2b0aaeb4431b39ffb