Synopsis

Important: kernel security update

Type/Severity

Security Advisory: Important

Topic

Updated kernel packages that fix one security issue are now available for
Red Hat Enterprise Linux 4 Extended Life Cycle Support.

Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

• A flaw was found in the way the Linux kernel handled GS segment register
  base switching when recovering from a #SS (stack segment) fault on an
  erroneous return to user space. A local, unprivileged user could use this
  flaw to escalate their privileges on the system. (CVE-2014-9322, Important)
  

Red Hat would like to thank Andy Lutomirski for reporting this issue.

All kernel users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. The system must be
rebooted for this update to take effect.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the
Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

To install kernel packages manually, use "rpm -ivh [package]". Do not use
"rpm -Uvh" as that will remove the running kernel binaries from your
system. You may use "rpm -e" to remove old kernels after determining that
the new kernel functions properly on your system.

Affected Products

• Red Hat Enterprise Linux Server - Extended Life Cycle Support 4 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 4 ia64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 4 i386

Fixes

• BZ - 1172806 - CVE-2014-9322 kernel: x86: local privesc due to bad_iret and paranoid entry incompatibility

CVEs

• CVE-2014-9322

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server - Extended Life Cycle Support 4

SRPM
kernel-2.6.9-106.EL.src.rpm	SHA-256: 360dacc486e70e686508de1953e7d7e48bb5f3a42382186cf951ff88653ef189
x86_64
kernel-2.6.9-106.EL.x86_64.rpm	SHA-256: a5e923a883d1ed8361f6dbe1406dcc0f5dbed9fb759398ecde4d4bf2ef81d7d6
kernel-2.6.9-106.EL.x86_64.rpm	SHA-256: a5e923a883d1ed8361f6dbe1406dcc0f5dbed9fb759398ecde4d4bf2ef81d7d6
kernel-devel-2.6.9-106.EL.x86_64.rpm	SHA-256: 605d40798c98793b3bf585074e4edc287f21d836905fc7b13557c54c284e51a7
kernel-devel-2.6.9-106.EL.x86_64.rpm	SHA-256: 605d40798c98793b3bf585074e4edc287f21d836905fc7b13557c54c284e51a7
kernel-doc-2.6.9-106.EL.noarch.rpm	SHA-256: 2155905d2367a6faeafbc1bbea8b25098973e6164d7655a9fd4f69c4fac7d1bb
kernel-doc-2.6.9-106.EL.noarch.rpm	SHA-256: 2155905d2367a6faeafbc1bbea8b25098973e6164d7655a9fd4f69c4fac7d1bb
kernel-largesmp-2.6.9-106.EL.x86_64.rpm	SHA-256: 8b8c9199031b33bda5079efcd15152db24fad240315be116a6c07024e799faad
kernel-largesmp-2.6.9-106.EL.x86_64.rpm	SHA-256: 8b8c9199031b33bda5079efcd15152db24fad240315be116a6c07024e799faad
kernel-largesmp-devel-2.6.9-106.EL.x86_64.rpm	SHA-256: 6124e56ae7c24ead871c6fc6418a92b83d8e83a6b03963c0c67422c1a5ae7d63
kernel-largesmp-devel-2.6.9-106.EL.x86_64.rpm	SHA-256: 6124e56ae7c24ead871c6fc6418a92b83d8e83a6b03963c0c67422c1a5ae7d63
kernel-smp-2.6.9-106.EL.x86_64.rpm	SHA-256: c7c70c139d24d4721cb9150161df97e5abeb65437e1a7a204ffea6cb1a7c06fa
kernel-smp-2.6.9-106.EL.x86_64.rpm	SHA-256: c7c70c139d24d4721cb9150161df97e5abeb65437e1a7a204ffea6cb1a7c06fa
kernel-smp-devel-2.6.9-106.EL.x86_64.rpm	SHA-256: 9f7083559afeab96c103d8b5f831ea0ab253169186c0f08bd28a6f050e436a37
kernel-smp-devel-2.6.9-106.EL.x86_64.rpm	SHA-256: 9f7083559afeab96c103d8b5f831ea0ab253169186c0f08bd28a6f050e436a37
kernel-xenU-2.6.9-106.EL.x86_64.rpm	SHA-256: 18308b689a9375ad74d3a17f17a5179ba08a45aa9ed66fb4334301adba6f04ed
kernel-xenU-2.6.9-106.EL.x86_64.rpm	SHA-256: 18308b689a9375ad74d3a17f17a5179ba08a45aa9ed66fb4334301adba6f04ed
kernel-xenU-devel-2.6.9-106.EL.x86_64.rpm	SHA-256: 614c05915bf014b384d284860935a2cb33252b619e9b36d27113fd39ce4c79a9
kernel-xenU-devel-2.6.9-106.EL.x86_64.rpm	SHA-256: 614c05915bf014b384d284860935a2cb33252b619e9b36d27113fd39ce4c79a9
ia64
kernel-2.6.9-106.EL.ia64.rpm	SHA-256: 93ffb268c3362dcedcc1eca012a0c18f8ac6685f0a884a2f33bf75347bf21866
kernel-devel-2.6.9-106.EL.ia64.rpm	SHA-256: d6bcbf58bcb310630db1d692da48535853ba0316b11b11aaa97c2d941372cc23
kernel-doc-2.6.9-106.EL.noarch.rpm	SHA-256: 2155905d2367a6faeafbc1bbea8b25098973e6164d7655a9fd4f69c4fac7d1bb
kernel-largesmp-2.6.9-106.EL.ia64.rpm	SHA-256: 2d9c707717ad405bca4da2186cf7b74d2f8cafd9359bd7b09979c8f4d4cf11f1
kernel-largesmp-devel-2.6.9-106.EL.ia64.rpm	SHA-256: 41eeccba6c88962979d48194ef70797d7d5657ff9a482921aeb8d58548d057c3
i386
kernel-2.6.9-106.EL.i686.rpm	SHA-256: 17a2cd5de27be8b0e99cdc6e62bb300e3475b39b6613423ad46a4a7cdae0512c
kernel-2.6.9-106.EL.i686.rpm	SHA-256: 17a2cd5de27be8b0e99cdc6e62bb300e3475b39b6613423ad46a4a7cdae0512c
kernel-devel-2.6.9-106.EL.i686.rpm	SHA-256: fcae208faa684f6a4fc4260ec89a1da956cae5321ee2236b42a8e29b54e6d97b
kernel-devel-2.6.9-106.EL.i686.rpm	SHA-256: fcae208faa684f6a4fc4260ec89a1da956cae5321ee2236b42a8e29b54e6d97b
kernel-doc-2.6.9-106.EL.noarch.rpm	SHA-256: 2155905d2367a6faeafbc1bbea8b25098973e6164d7655a9fd4f69c4fac7d1bb
kernel-doc-2.6.9-106.EL.noarch.rpm	SHA-256: 2155905d2367a6faeafbc1bbea8b25098973e6164d7655a9fd4f69c4fac7d1bb
kernel-hugemem-2.6.9-106.EL.i686.rpm	SHA-256: 0b71d04a401ef2e4c09b49bba40a20bcb7cb8233bdd22bbdbc4432bd94dbaa8d
kernel-hugemem-2.6.9-106.EL.i686.rpm	SHA-256: 0b71d04a401ef2e4c09b49bba40a20bcb7cb8233bdd22bbdbc4432bd94dbaa8d
kernel-hugemem-devel-2.6.9-106.EL.i686.rpm	SHA-256: 5d727f6ec373bc1c4a10668033ed67822f93220cf1976025ec239a0d64898c74
kernel-hugemem-devel-2.6.9-106.EL.i686.rpm	SHA-256: 5d727f6ec373bc1c4a10668033ed67822f93220cf1976025ec239a0d64898c74
kernel-smp-2.6.9-106.EL.i686.rpm	SHA-256: aaa796388974b0e21ad6827ded45e2dd953e67920fb978da6dbd745c5d914877
kernel-smp-2.6.9-106.EL.i686.rpm	SHA-256: aaa796388974b0e21ad6827ded45e2dd953e67920fb978da6dbd745c5d914877
kernel-smp-devel-2.6.9-106.EL.i686.rpm	SHA-256: d4bd052a88502f1f8ee71d4db9f637aadb6fe3c0e6b04b56e9adb6f6eadd7a3b
kernel-smp-devel-2.6.9-106.EL.i686.rpm	SHA-256: d4bd052a88502f1f8ee71d4db9f637aadb6fe3c0e6b04b56e9adb6f6eadd7a3b
kernel-xenU-2.6.9-106.EL.i686.rpm	SHA-256: cc64b6ddf24ef55e63321d1756718eb1454c1ecea985b3847ae6cfe1efe4f473
kernel-xenU-2.6.9-106.EL.i686.rpm	SHA-256: cc64b6ddf24ef55e63321d1756718eb1454c1ecea985b3847ae6cfe1efe4f473
kernel-xenU-devel-2.6.9-106.EL.i686.rpm	SHA-256: c48211be5d2391f9c6d03a10360c57d605e4016413169e58b0b51ee2ee702a4e
kernel-xenU-devel-2.6.9-106.EL.i686.rpm	SHA-256: c48211be5d2391f9c6d03a10360c57d605e4016413169e58b0b51ee2ee702a4e