Synopsis

Important: kernel security update

Type/Severity

Security Advisory: Important

Topic

Updated kernel packages that fix two security issues are now available for
Red Hat Enterprise Linux 6.4 Advanced Update Support.

Red Hat Product Security has rated this update as having Important security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

• It was found that the x86 ISA (Instruction Set Architecture) is prone to
  a denial of service attack inside a virtualized environment in the form of
  an infinite loop in the microcode due to the way (sequential) delivering of
  benign exceptions such as #AC (alignment check exception) and #DB (debug
  exception) is handled. A privileged user inside a guest could use these
  flaws to create denial of service conditions on the host kernel.
  (CVE-2015-5307, CVE-2015-8104, Important)
  

Red Hat would like to thank Ben Serebrin of Google Inc. for reporting the
CVE-2015-5307 issue.

All kernel users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues. The system must be
rebooted for this update to take effect.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server - AUS 6.4 x86_64

Fixes

• BZ - 1277172 - CVE-2015-5307 virt: guest to host DoS by triggering an infinite loop in microcode via #AC exception
• BZ - 1278496 - CVE-2015-8104 virt: guest to host DoS by triggering an infinite loop in microcode via #DB exception

CVEs

• CVE-2015-5307
• CVE-2015-8104

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server - AUS 6.4

SRPM
kernel-2.6.32-358.69.1.el6.src.rpm	SHA-256: 70d2014064bb538452b96d300351a2d84f5830d493691f9df23d2179cbe42551
x86_64
kernel-2.6.32-358.69.1.el6.x86_64.rpm	SHA-256: d80a0490dff58c5d00bad83a36b353ae2c7efbee29edd18ba2bfd34abb92d95e
kernel-debug-2.6.32-358.69.1.el6.x86_64.rpm	SHA-256: 0be5e459e9613efa466bd68aa3fe0d329d969da3e24b74b4beca67c617178ff0
kernel-debug-debuginfo-2.6.32-358.69.1.el6.x86_64.rpm	SHA-256: fc008f71cd8cdf20dd71a9a43d7c1b099bc9d223d7282089dd963fbd9494b27c
kernel-debug-debuginfo-2.6.32-358.69.1.el6.x86_64.rpm	SHA-256: fc008f71cd8cdf20dd71a9a43d7c1b099bc9d223d7282089dd963fbd9494b27c
kernel-debug-devel-2.6.32-358.69.1.el6.x86_64.rpm	SHA-256: e7acc7409ae621737e7ab46aacdc418f802317151d081ff56cf07405f0a0b051
kernel-debuginfo-2.6.32-358.69.1.el6.x86_64.rpm	SHA-256: c3b3ae9732b6192e1f71bd03f7290dad6d4078bb10ca631b41370390efde0b05
kernel-debuginfo-2.6.32-358.69.1.el6.x86_64.rpm	SHA-256: c3b3ae9732b6192e1f71bd03f7290dad6d4078bb10ca631b41370390efde0b05
kernel-debuginfo-common-x86_64-2.6.32-358.69.1.el6.x86_64.rpm	SHA-256: 1f2624016947ce0a5b9877b6b10291b4685283eea6662d214feaa7ecd4fe6ef3
kernel-debuginfo-common-x86_64-2.6.32-358.69.1.el6.x86_64.rpm	SHA-256: 1f2624016947ce0a5b9877b6b10291b4685283eea6662d214feaa7ecd4fe6ef3
kernel-devel-2.6.32-358.69.1.el6.x86_64.rpm	SHA-256: cff7ab394608714d8cabaf6c0b9c23299ca5f48bc411f54898bf76c75d585e5f
kernel-doc-2.6.32-358.69.1.el6.noarch.rpm	SHA-256: b6bf3a8256657d6a3f921a2cffc92799743588b1658864ce0a16b17518ead14c
kernel-firmware-2.6.32-358.69.1.el6.noarch.rpm	SHA-256: b27e591b86c53b0b8ae8e902e7a5719907cf5e8fbad1db185b718e288b5d4290
kernel-headers-2.6.32-358.69.1.el6.x86_64.rpm	SHA-256: a90a8a26e855f06a8b39da36028fae6ad67a56c0f662b804ec3a6458d6bb6267
perf-2.6.32-358.69.1.el6.x86_64.rpm	SHA-256: 7d60fe0c5fe21d111a0e7c41d737e80442c38bbebaa9fcc915354347be5ac496
perf-debuginfo-2.6.32-358.69.1.el6.x86_64.rpm	SHA-256: aacde5b1706fcd8614edf575b217dc4077997e76077cdd674cf7fbce9cc1372a
perf-debuginfo-2.6.32-358.69.1.el6.x86_64.rpm	SHA-256: aacde5b1706fcd8614edf575b217dc4077997e76077cdd674cf7fbce9cc1372a
python-perf-2.6.32-358.69.1.el6.x86_64.rpm	SHA-256: 0385a8e5d8fc907843da72304092e424c889c41097d4f85aa0e677c6213bcd53
python-perf-debuginfo-2.6.32-358.69.1.el6.x86_64.rpm	SHA-256: 7158d5bfabbe3a4bc48aa3a99655b3eaf090445e74f5e812e0f2c772d0cbe62d
python-perf-debuginfo-2.6.32-358.69.1.el6.x86_64.rpm	SHA-256: 7158d5bfabbe3a4bc48aa3a99655b3eaf090445e74f5e812e0f2c772d0cbe62d