Synopsis

Important: kernel security update

Type/Severity

Security Advisory: Important

Topic

Updated kernel packages that fix one security issue are now available for
Red Hat Enterprise Linux 6.2 Advanced Update Support.

The Red Hat Security Response Team has rated this update as having
Important security impact. A Common Vulnerability Scoring System (CVSS)
base score, which gives a detailed severity rating, is available from the
CVE link in the References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

• It was found that the Linux kernel's ptrace subsystem allowed a traced
  process' instruction pointer to be set to a non-canonical memory address
  without forcing the non-sysret code path when returning to user space.
  A local, unprivileged user could use this flaw to crash the system or,
  potentially, escalate their privileges on the system. (CVE-2014-4699,
  Important)
  

Note: The CVE-2014-4699 issue only affected systems using an Intel CPU.

Red Hat would like to thank Andy Lutomirski for reporting this issue.

All kernel users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. The system must be
rebooted for this update to take effect.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

To install kernel packages manually, use "rpm -ivh [package]". Do not use
"rpm -Uvh" as that will remove the running kernel binaries from your
system. You may use "rpm -e" to remove old kernels after determining that
the new kernel functions properly on your system.

Affected Products

• Red Hat Enterprise Linux Server - AUS 6.2 x86_64

Fixes

• BZ - 1115927 - CVE-2014-4699 kernel: x86_64: ptrace: sysret to non-canonical address

CVEs

• CVE-2014-4699

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server - AUS 6.2

SRPM
kernel-2.6.32-220.53.1.el6.src.rpm	SHA-256: 91a66a8cb31aac14f588cbab2b9934733354215a478b45790e8dbe2f8ce892f0
x86_64
kernel-2.6.32-220.53.1.el6.x86_64.rpm	SHA-256: 23a954ed91cf1682dccc4d5782db7c1b53e01bceb3a2f37cd58ebeb80762b258
kernel-debug-2.6.32-220.53.1.el6.x86_64.rpm	SHA-256: 1d6f473df996b3731ec90f84009d4cc5d3510147d4db0e1928582a1225e1f5ba
kernel-debug-debuginfo-2.6.32-220.53.1.el6.x86_64.rpm	SHA-256: cbb4220f623989c28f9e1d6bb8751e06253e5a55ebdad0e765558688dddb168f
kernel-debug-debuginfo-2.6.32-220.53.1.el6.x86_64.rpm	SHA-256: cbb4220f623989c28f9e1d6bb8751e06253e5a55ebdad0e765558688dddb168f
kernel-debug-devel-2.6.32-220.53.1.el6.x86_64.rpm	SHA-256: 1328aec68234b9c5475ff50f86f2746e6152db0148b661e9a03a285439a78c67
kernel-debuginfo-2.6.32-220.53.1.el6.x86_64.rpm	SHA-256: afb2799fd079e9490fa87a9bbdb3ad8a94faf34f0e262a2eac2395c33fdf9109
kernel-debuginfo-2.6.32-220.53.1.el6.x86_64.rpm	SHA-256: afb2799fd079e9490fa87a9bbdb3ad8a94faf34f0e262a2eac2395c33fdf9109
kernel-debuginfo-common-x86_64-2.6.32-220.53.1.el6.x86_64.rpm	SHA-256: c950b1768417627fe4e5233e3f2144bd759cb5e5e7b8c091999d74c95e2f5e09
kernel-debuginfo-common-x86_64-2.6.32-220.53.1.el6.x86_64.rpm	SHA-256: c950b1768417627fe4e5233e3f2144bd759cb5e5e7b8c091999d74c95e2f5e09
kernel-devel-2.6.32-220.53.1.el6.x86_64.rpm	SHA-256: 61d087b74ac6a26c4ea26c97d26a50bbec12642142a588d6fb0275aad751cfef
kernel-doc-2.6.32-220.53.1.el6.noarch.rpm	SHA-256: 3150d95c82621510d15daceeca1276e9e8107e9541bdb70d1386967872d678be
kernel-firmware-2.6.32-220.53.1.el6.noarch.rpm	SHA-256: d7b00954b844978f97d0b6ea8afaec458730450e99b14de5ab383f291c8b2d78
kernel-headers-2.6.32-220.53.1.el6.x86_64.rpm	SHA-256: e27d2bcb73c2aec179536a1b588b8b97ed406caabd605c3a7510f0b12889ff10
perf-2.6.32-220.53.1.el6.x86_64.rpm	SHA-256: 4ce35a0a2096d933e927fcd0af8a905ed3299770fb77b2d4969ec71c37f9063a
perf-debuginfo-2.6.32-220.53.1.el6.x86_64.rpm	SHA-256: b9f97b933a54211b3b65c7cd76b0d3aa19574055bde80621250baf35fbf9129b
perf-debuginfo-2.6.32-220.53.1.el6.x86_64.rpm	SHA-256: b9f97b933a54211b3b65c7cd76b0d3aa19574055bde80621250baf35fbf9129b
python-perf-2.6.32-220.53.1.el6.x86_64.rpm	SHA-256: 6065735a5a2fcfdcb03f624278b0360fb82f1230d917d2e37916ff13fab29d07
python-perf-debuginfo-2.6.32-220.53.1.el6.x86_64.rpm	SHA-256: b62acdf1324c994b1f4f98a05fe25eca9c8f5472d7086b1e02da350e460494c7
python-perf-debuginfo-2.6.32-220.53.1.el6.x86_64.rpm	SHA-256: b62acdf1324c994b1f4f98a05fe25eca9c8f5472d7086b1e02da350e460494c7