Synopsis

Important: kernel security update

Type/Severity

Security Advisory: Important

Topic

Updated kernel packages that fix two security issues are now available for
Red Hat Enterprise Linux 6.2 Advanced Update Support.

Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

• A flaw was found in the way the Linux kernel's futex subsystem handled
  reference counting when requeuing futexes during futex_wait(). A local,
  unprivileged user could use this flaw to zero out the reference counter of
  an inode or an mm struct that backs up the memory area of the futex, which
  could lead to a use-after-free flaw, resulting in a system crash or,
  potentially, privilege escalation. (CVE-2014-0205)
  
• A NULL pointer dereference flaw was found in the way the Linux kernel's
  Stream Control Transmission Protocol (SCTP) implementation handled
  simultaneous connections between the same hosts. A remote attacker could
  use this flaw to crash the system. (CVE-2014-5077)
  

The security impact of the CVE-2014-0205 issue was discovered by Mateusz
Guzik of Red Hat.

All kernel users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues. The system must be
rebooted for this update to take effect.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

To install kernel packages manually, use "rpm -ivh [package]". Do not use
"rpm -Uvh" as that will remove the running kernel binaries from your
system. You may use "rpm -e" to remove old kernels after determining that
the new kernel functions properly on your system.

Affected Products

• Red Hat Enterprise Linux Server - AUS 6.2 x86_64

Fixes

• BZ - 1094455 - CVE-2014-0205 kernel: futex: refcount issue in case of requeue
• BZ - 1122982 - CVE-2014-5077 Kernel: net: SCTP: fix a NULL pointer dereference during INIT collisions

CVEs

• CVE-2014-5077
• CVE-2014-0205

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server - AUS 6.2

SRPM
kernel-2.6.32-220.56.1.el6.src.rpm	SHA-256: 3d8ed16500ce2bb071750c2f108a2d01d97fb85fc7e9d796e98e2e77a997f0ea
x86_64
kernel-2.6.32-220.56.1.el6.x86_64.rpm	SHA-256: dc523eac392366094ba1b609fbab6518dcd3612343ed7dc7e8abde6c4fcb00ea
kernel-debug-2.6.32-220.56.1.el6.x86_64.rpm	SHA-256: 9922898d2b5a320eda29be4e859b6581645c0cd3ea7834b08133a4d8ef5b321d
kernel-debug-debuginfo-2.6.32-220.56.1.el6.x86_64.rpm	SHA-256: 9f1a99a03e1638e67b0ab7b15be5b86be15198a84ccf0e9e727cfdef2512d64a
kernel-debug-debuginfo-2.6.32-220.56.1.el6.x86_64.rpm	SHA-256: 9f1a99a03e1638e67b0ab7b15be5b86be15198a84ccf0e9e727cfdef2512d64a
kernel-debug-devel-2.6.32-220.56.1.el6.x86_64.rpm	SHA-256: 0be7c6db373cd85694eb5574efe512d4c7813d6c6f21933e7acd63a0a0cfa99d
kernel-debuginfo-2.6.32-220.56.1.el6.x86_64.rpm	SHA-256: b3f5e2fc3430ba3bb44df5eff5dd4001aefb963fe27c20398fe5dbb81428f4ad
kernel-debuginfo-2.6.32-220.56.1.el6.x86_64.rpm	SHA-256: b3f5e2fc3430ba3bb44df5eff5dd4001aefb963fe27c20398fe5dbb81428f4ad
kernel-debuginfo-common-x86_64-2.6.32-220.56.1.el6.x86_64.rpm	SHA-256: 727161b22f253bb150878bba42d181e26135b116aa11f9c3f310c450dca7e94f
kernel-debuginfo-common-x86_64-2.6.32-220.56.1.el6.x86_64.rpm	SHA-256: 727161b22f253bb150878bba42d181e26135b116aa11f9c3f310c450dca7e94f
kernel-devel-2.6.32-220.56.1.el6.x86_64.rpm	SHA-256: 03fccf11dffb09153d24c769f612ba87eb559853074e762a0bc568f0f6ec99aa
kernel-doc-2.6.32-220.56.1.el6.noarch.rpm	SHA-256: 6c5ecd406a627a4fba92f92d89f2ac930bb783f79fc39e7180f1fecf2390a544
kernel-firmware-2.6.32-220.56.1.el6.noarch.rpm	SHA-256: 3dc497a9940b63db25ef7c3cf79fc6aa92fcec2302703ce018ce24e687f20f9b
kernel-headers-2.6.32-220.56.1.el6.x86_64.rpm	SHA-256: 1ed9511d55866055b556f9b246aeecabd4a1e841076461abc2ba5c3caa46e654
perf-2.6.32-220.56.1.el6.x86_64.rpm	SHA-256: e4dd059e680142131ca0ea3a25bd0e7a372f3f768bd3e81ed5011f56c9c0bcc6
perf-debuginfo-2.6.32-220.56.1.el6.x86_64.rpm	SHA-256: b3fc917f29138e1404f818099491d3bfe730ab1a56d6c530d99ea24561add23b
perf-debuginfo-2.6.32-220.56.1.el6.x86_64.rpm	SHA-256: b3fc917f29138e1404f818099491d3bfe730ab1a56d6c530d99ea24561add23b
python-perf-2.6.32-220.56.1.el6.x86_64.rpm	SHA-256: 5786e4f484a9e9ada5f710e679c1b1ae4855094c0a1bd6e05ad4a900f8c929be
python-perf-debuginfo-2.6.32-220.56.1.el6.x86_64.rpm	SHA-256: fe2a5a4055a5d0da811d7016017dc7953e8a57170d8b37c826caf7bdc09a572d
python-perf-debuginfo-2.6.32-220.56.1.el6.x86_64.rpm	SHA-256: fe2a5a4055a5d0da811d7016017dc7953e8a57170d8b37c826caf7bdc09a572d