Synopsis

Important: kernel security and bug fix update

Type/Severity

Security Advisory: Important

Topic

Updated kernel packages that fix one security issue and one bug are now
available for Red Hat Enterprise Linux 6.2 Advanced Update Support.

The Red Hat Security Response Team has rated this update as having
Important security impact. A Common Vulnerability Scoring System (CVSS)
base score, which gives a detailed severity rating, is available from the
CVE link in the References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

• A flaw was found in the way the pppol2tp_setsockopt() and
  pppol2tp_getsockopt() functions in the Linux kernel's PPP over L2TP
  implementation handled requests with a non-SOL_PPPOL2TP socket option
  level. A local, unprivileged user could use this flaw to escalate their
  privileges on the system. (CVE-2014-4943, Important)
  

Red Hat would like to thank Sasha Levin for reporting this issue.

This update also fixes the following bug:

• When a device was registered to a bus, a race condition could occur
  between the device being added to the list of devices of the bus and
  binding the device to a driver. As a result, the device could already be
  bound to a driver which led to a warning and incorrect reference counting,
  and consequently to a kernel panic on device removal. To avoid the race
  condition, this update adds a check to identify an already bound device.
  (BZ#1114409)
  

All kernel users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues. The system must be
rebooted for this update to take effect.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

To install kernel packages manually, use "rpm -ivh [package]". Do not use
"rpm -Uvh" as that will remove the running kernel binaries from your
system. You may use "rpm -e" to remove old kernels after determining that
the new kernel functions properly on your system.

Affected Products

• Red Hat Enterprise Linux Server - AUS 6.2 x86_64

Fixes

• BZ - 1119458 - CVE-2014-4943 kernel: net: pppol2tp: level handling in pppol2tp_[s,g]etsockopt()

CVEs

• CVE-2014-4943

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server - AUS 6.2

SRPM
kernel-2.6.32-220.54.1.el6.src.rpm	SHA-256: 35e461d0921b412e101b65b72cb2a1504be64839b8473e0af44539a0cab03890
x86_64
kernel-2.6.32-220.54.1.el6.x86_64.rpm	SHA-256: 283b474a4840fa84659daae71f8f63f177c850652110104dd176a622d4b57f64
kernel-debug-2.6.32-220.54.1.el6.x86_64.rpm	SHA-256: 021af74d34a6fc60228d53a444158acf5dad47a684b3ad42e276fcedfa2f03f7
kernel-debug-debuginfo-2.6.32-220.54.1.el6.x86_64.rpm	SHA-256: 569b6e6b6d8f67103af876b6c9ecd2693491ba61aa231a96bca0630f07ddd949
kernel-debug-debuginfo-2.6.32-220.54.1.el6.x86_64.rpm	SHA-256: 569b6e6b6d8f67103af876b6c9ecd2693491ba61aa231a96bca0630f07ddd949
kernel-debug-devel-2.6.32-220.54.1.el6.x86_64.rpm	SHA-256: 6bc8b25b5df3d7bb4c5f9b84dc390c5b7d83058b0fa7dbdfc4a41f1da009c4ca
kernel-debuginfo-2.6.32-220.54.1.el6.x86_64.rpm	SHA-256: 948dad35cd2698bb55da3a1e1e3b8ae413bc79f2692a107b984030a319eccb03
kernel-debuginfo-2.6.32-220.54.1.el6.x86_64.rpm	SHA-256: 948dad35cd2698bb55da3a1e1e3b8ae413bc79f2692a107b984030a319eccb03
kernel-debuginfo-common-x86_64-2.6.32-220.54.1.el6.x86_64.rpm	SHA-256: 9b54f9d74337e9c9cbc3da6d6fdcc994bfc90f00cc86d6da1841b874a668d586
kernel-debuginfo-common-x86_64-2.6.32-220.54.1.el6.x86_64.rpm	SHA-256: 9b54f9d74337e9c9cbc3da6d6fdcc994bfc90f00cc86d6da1841b874a668d586
kernel-devel-2.6.32-220.54.1.el6.x86_64.rpm	SHA-256: 341a7add65e36f45424abc7fb94e5ad50dea742e9cc2264011c835a4344b4eb2
kernel-doc-2.6.32-220.54.1.el6.noarch.rpm	SHA-256: 1c2896adc8deef735e5fdf9a6f01590ce210368fa8a6f57c7c495d2154c9d3e8
kernel-firmware-2.6.32-220.54.1.el6.noarch.rpm	SHA-256: a397e185ed66332e028b78c5f086ab8a87b32ce54323b39e2be1eec9cfe926b0
kernel-headers-2.6.32-220.54.1.el6.x86_64.rpm	SHA-256: 4451dd10610c03e2e68e8a6624d9cf8084bb8f713a235dbceb9b46ae1a583362
perf-2.6.32-220.54.1.el6.x86_64.rpm	SHA-256: b41cbf4e044ee02d6414eb1473331912966e82ddd487fa1f1fe41aaaf3834744
perf-debuginfo-2.6.32-220.54.1.el6.x86_64.rpm	SHA-256: ebf0648311247576fd2c4f5b59f36b6a13d646e16b0c6b66900d97641b0833fb
perf-debuginfo-2.6.32-220.54.1.el6.x86_64.rpm	SHA-256: ebf0648311247576fd2c4f5b59f36b6a13d646e16b0c6b66900d97641b0833fb
python-perf-2.6.32-220.54.1.el6.x86_64.rpm	SHA-256: 6fc6f6847f08ea04fa25723f4c69b14fb837d1c2e0389db410fa5aec256d4b2e
python-perf-debuginfo-2.6.32-220.54.1.el6.x86_64.rpm	SHA-256: d33cbd389e5ae8b0c772f58623a62b1e6cbd7dfad593a06faa8be8564289704b
python-perf-debuginfo-2.6.32-220.54.1.el6.x86_64.rpm	SHA-256: d33cbd389e5ae8b0c772f58623a62b1e6cbd7dfad593a06faa8be8564289704b