Synopsis

Important: kernel security update

Type/Severity

Security Advisory: Important

Topic

Updated kernel packages that fix one security issue are now available for
Red Hat Enterprise Linux 5.6 Long Life.

Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

• It was found that the Linux kernel's Infiniband subsystem did not
  properly sanitize input parameters while registering memory regions from
  user space via the (u)verbs API. A local user with access to a
  /dev/infiniband/uverbsX device could use this flaw to crash the system or,
  potentially, escalate their privileges on the system. (CVE-2014-8159,
  Important)
  

Red Hat would like to thank Mellanox for reporting this issue.

All kernel users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. The system must be
rebooted for this update to take effect.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server - AUS 5.6 x86_64
• Red Hat Enterprise Linux Server - AUS 5.6 ia64
• Red Hat Enterprise Linux Server - AUS 5.6 i386

Fixes

• BZ - 1181166 - CVE-2014-8159 kernel: infiniband: uverbs: unprotected physical memory access

CVEs

• CVE-2014-8159

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server - AUS 5.6

SRPM
kernel-2.6.18-238.55.1.el5.src.rpm	SHA-256: ce08f1160b15d9dbaf27f497c0227d71151d24f4597cbf8e208281409669a0b1
x86_64
kernel-2.6.18-238.55.1.el5.x86_64.rpm	SHA-256: db0666beb77f08cacf32317aab728111d17da4497a5522e96f9860cf4e4c494e
kernel-debug-2.6.18-238.55.1.el5.x86_64.rpm	SHA-256: c7831478a07c091616b15f6675cec498c5b8362194426fd8b311f35ff0fd609c
kernel-debug-debuginfo-2.6.18-238.55.1.el5.x86_64.rpm	SHA-256: 3ba0aa1f6536281e4cf7e1eb6c70f058117cc3b8fe6cfadf99a0c2c8029b9843
kernel-debug-devel-2.6.18-238.55.1.el5.x86_64.rpm	SHA-256: 72c195712f19f4571ce0bbe0c17d621f9ae15237f046866f0b9f5125193a9dcd
kernel-debuginfo-2.6.18-238.55.1.el5.x86_64.rpm	SHA-256: 33a3cd7b72eacbc4cb774df1eff2a4da8ef5f068d57a26a1aec81521383126b1
kernel-debuginfo-common-2.6.18-238.55.1.el5.x86_64.rpm	SHA-256: 7309850f20b858e2af5c562c0995d068fddc72f6f17f72da5ee7f6d460dc5405
kernel-devel-2.6.18-238.55.1.el5.x86_64.rpm	SHA-256: 2a2fc9c8b50273876c1df404d190369ab021299efd36b890fa895e049b21d57a
kernel-doc-2.6.18-238.55.1.el5.noarch.rpm	SHA-256: fbded8bdeb75cb2a404cc9c892c751f6c5cc776a5454aedd849993d167adb360
kernel-headers-2.6.18-238.55.1.el5.x86_64.rpm	SHA-256: 80f90fdaca8d8da23d6e10c2b07839f3c5893d318c6d7da2eac83e944e145a6d
kernel-xen-2.6.18-238.55.1.el5.x86_64.rpm	SHA-256: 531b6b0b2652666b5089c4fa26fb719ac560bfddc5e2b0493ba0edd296c53e83
kernel-xen-debuginfo-2.6.18-238.55.1.el5.x86_64.rpm	SHA-256: f05c91d13724b449c15d7669b21a88273373926d08a968f61a7b91dc99265f8b
kernel-xen-devel-2.6.18-238.55.1.el5.x86_64.rpm	SHA-256: b93a253ba712c5561fd615aef41e10372def37d247e989f4cb6ae8951f13369d
ia64
kernel-2.6.18-238.55.1.el5.ia64.rpm	SHA-256: 7241662d0f691dffa358bd9e103f4d7905f98a9ec78b5a1270f32dac12baa798
kernel-debug-2.6.18-238.55.1.el5.ia64.rpm	SHA-256: e182bb41f9ef81c4d789723a2079926fcb3fdae5cc4ed699f7fd1677e1856439
kernel-debug-debuginfo-2.6.18-238.55.1.el5.ia64.rpm	SHA-256: 47b9204c1eeb9a7761cd825d214d1cf517da7b31e7fde7e28b38eeaa2ee727a5
kernel-debug-devel-2.6.18-238.55.1.el5.ia64.rpm	SHA-256: 28a09b89984b53df60c3c172761237ceb6ca406e062d9179ee2e70ce96af4f7b
kernel-debuginfo-2.6.18-238.55.1.el5.ia64.rpm	SHA-256: 6335bfeb09101954a97aebbfbfb576e5185a73d3ba47f8e97ec617516877c8fd
kernel-debuginfo-common-2.6.18-238.55.1.el5.ia64.rpm	SHA-256: 1e332c8749f7abd8b85855fccb99464f9483544f4a5eb6c26674e16d8d1d432f
kernel-devel-2.6.18-238.55.1.el5.ia64.rpm	SHA-256: 75e33cbe661d3d2c0cba90130924d9b528ceb931633a46105bbec7ee5cb98bac
kernel-doc-2.6.18-238.55.1.el5.noarch.rpm	SHA-256: fbded8bdeb75cb2a404cc9c892c751f6c5cc776a5454aedd849993d167adb360
kernel-headers-2.6.18-238.55.1.el5.ia64.rpm	SHA-256: 03070d7027cc8745e03149b4bef82c958c67d2e0e0a046b0f426935e81170cec
kernel-xen-2.6.18-238.55.1.el5.ia64.rpm	SHA-256: 575edce55d6e137c6e7b69211fd22cb09c7ddc6c680fb17d86529ed043958f39
kernel-xen-debuginfo-2.6.18-238.55.1.el5.ia64.rpm	SHA-256: 43907f90e9a36270524aa484d8448e999fc968a6037cd335cf2173eab0ad20f6
kernel-xen-devel-2.6.18-238.55.1.el5.ia64.rpm	SHA-256: 198486d9031d88f3f2f07d98f6396081bf0139d2ca64e4844077ce04e6d3cc2d
i386
kernel-2.6.18-238.55.1.el5.i686.rpm	SHA-256: 3afb09c512f34257115f7f4ba87608af220b8488e85f71f99d617c9c10b6f8e8
kernel-PAE-2.6.18-238.55.1.el5.i686.rpm	SHA-256: e5fbcccb4779c46c4c8883fe6f18eb3fc7b7d9aac1c5496935b59dbdb6db94d1
kernel-PAE-debuginfo-2.6.18-238.55.1.el5.i686.rpm	SHA-256: 35e0ce5570cd0beb705d1397d7c701710b7def9de8e494ab124735f224d64768
kernel-PAE-devel-2.6.18-238.55.1.el5.i686.rpm	SHA-256: 71a03e07a3cd4fb5a049dad79ccf8e24cd58ebcda43eb000865431988c0a67fc
kernel-debug-2.6.18-238.55.1.el5.i686.rpm	SHA-256: 8bdbab30f1a5c7e2cb3fc523b05e12bb3a86b4c117844d75a8ca0466b7bac575
kernel-debug-debuginfo-2.6.18-238.55.1.el5.i686.rpm	SHA-256: 0aa953d607d2ef6b8b6a2e990424565cc16bcb55dee4c002c2d93792a13f746c
kernel-debug-devel-2.6.18-238.55.1.el5.i686.rpm	SHA-256: 2fe805f25f4c23f2e2bc31df49da393d76d6addc1ef841152e1edf43022fad2b
kernel-debuginfo-2.6.18-238.55.1.el5.i686.rpm	SHA-256: c6010aa1f277fa5510f048e306b09bde0ea953b5779570df9aba8f5d5fdf1fe6
kernel-debuginfo-common-2.6.18-238.55.1.el5.i686.rpm	SHA-256: 0f7905a2b09e73d64ba3f66250eec8906b5d88e1c5f912edef0ea01ac8f5351c
kernel-devel-2.6.18-238.55.1.el5.i686.rpm	SHA-256: 1afdedd8e300cb5326169138156ae54d439e4f042b412f6519d53f2f6771e339
kernel-doc-2.6.18-238.55.1.el5.noarch.rpm	SHA-256: fbded8bdeb75cb2a404cc9c892c751f6c5cc776a5454aedd849993d167adb360
kernel-headers-2.6.18-238.55.1.el5.i386.rpm	SHA-256: 46ceed46ab47ba83abee7c382ea7191c9abf929cb9964a8d29a7284432514eea
kernel-xen-2.6.18-238.55.1.el5.i686.rpm	SHA-256: 6582a90bd833d61822453eb93cfc280badc2ad769bb5078aa28938833e4bf1c5
kernel-xen-debuginfo-2.6.18-238.55.1.el5.i686.rpm	SHA-256: bc33e649934a44cc286467a2545c289e3762c526de5d3dd169d0aeba46b330b6
kernel-xen-devel-2.6.18-238.55.1.el5.i686.rpm	SHA-256: 85c8768372c9d28f9103bcabcd680271eb7deb1cf228ea82828332580cded7d1