Synopsis

Important: kernel security update

Type/Severity

Security Advisory: Important

Topic

An update for kernel is now available for Red Hat Enterprise Linux 5.9 Long
Life.

Red Hat Product Security has rated this update as having a security impact of
Important. A Common Vulnerability Scoring System (CVSS) base score, which gives
a detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.

Description

The kernel packages contain the Linux kernel, the core of any Linux operating
system.

Security Fix(es):

• A race condition was found in the way the Linux kernel's memory subsystem
  handled the copy-on-write (COW) breakage of private read-only memory mappings.
  An unprivileged, local user could use this flaw to gain write access to
  otherwise read-only memory mappings and thus increase their privileges on the
  system. (CVE-2016-5195, Important)
  

Red Hat would like to thank Phil Oester for reporting this issue.

Solution

For details on how to apply this update, which includes the changes described in
this advisory, refer to:

https://access.redhat.com/articles/11258

The system must be rebooted for this update to take effect.

Affected Products

• Red Hat Enterprise Linux Server - AUS 5.9 x86_64
• Red Hat Enterprise Linux Server - AUS 5.9 ia64
• Red Hat Enterprise Linux Server - AUS 5.9 i386

Fixes

• BZ - 1384344 - CVE-2016-5195 kernel: mm: privilege escalation via MAP_PRIVATE COW breakage

CVEs

• CVE-2016-5195

References

• https://access.redhat.com/security/updates/classification/#important
• https://access.redhat.com/security/vulnerabilities/2706661

Red Hat Enterprise Linux Server - AUS 5.9

SRPM
kernel-2.6.18-348.32.1.el5.src.rpm	SHA-256: 806095572c869b20637405330c3da9661a980f1eb7fa6c03fa725a79e7f700f2
x86_64
kernel-2.6.18-348.32.1.el5.x86_64.rpm	SHA-256: be2ffe2510fcbbb39135c93f81b677cca4c13277db76f4931169b63ba1ceb701
kernel-debug-2.6.18-348.32.1.el5.x86_64.rpm	SHA-256: 241184b17220281825d339bfde47565456ea787a429fade043ac57658ff49cb4
kernel-debug-debuginfo-2.6.18-348.32.1.el5.x86_64.rpm	SHA-256: fa53ce184a018b919a7c7d2329fe1e956a3b0686fe5f365cfe969e3a8565d99e
kernel-debug-devel-2.6.18-348.32.1.el5.x86_64.rpm	SHA-256: ea449486094d7ebb97bbc9548931adbfeb101e0a133eb249bdf084f9e6ebdf92
kernel-debuginfo-2.6.18-348.32.1.el5.x86_64.rpm	SHA-256: 7190942ddba8c1b3a1a2bdf37246c15f55f8a28b9c3cbb732b237a29a38b20f3
kernel-debuginfo-common-2.6.18-348.32.1.el5.x86_64.rpm	SHA-256: 48ff45567d6822168f10b113715d52887c847d3ffff2fe68688704ecf1df85dc
kernel-devel-2.6.18-348.32.1.el5.x86_64.rpm	SHA-256: f915b70231aeb88942d4a8d6c68b6762606bc92d66b1ced0f4aeadb78f36a79b
kernel-doc-2.6.18-348.32.1.el5.noarch.rpm	SHA-256: cf542fb28132b39dcb54b191cbd1b66158a01466bab963b4d3fc97dfb4d62b98
kernel-headers-2.6.18-348.32.1.el5.x86_64.rpm	SHA-256: 71065e406f21203fb9a979a2d2e95213dcd419e6016e0a4fda3a69ee2b838416
kernel-xen-2.6.18-348.32.1.el5.x86_64.rpm	SHA-256: b7fa14243f0ed4627f81908bddd475586284cda30803aa2c31d9f7d7a00c0354
kernel-xen-debuginfo-2.6.18-348.32.1.el5.x86_64.rpm	SHA-256: 7b23f4208e762dc253ba87b34f496e5747eeba6dce2b3087453b4575d81ee014
kernel-xen-devel-2.6.18-348.32.1.el5.x86_64.rpm	SHA-256: b8ea62b4d1c979946ab5c622d9795521ab3a2f954f899b3aff84c0ee06ce7638
ia64
kernel-2.6.18-348.32.1.el5.ia64.rpm	SHA-256: eee08f95edf5855f6d85a9a50466bb68d3041efde7932770f9aa90a5e969a645
kernel-debug-2.6.18-348.32.1.el5.ia64.rpm	SHA-256: b23e830220ba83c9885be080e1ecaaee37de1c60ed63d961915190b73eb21beb
kernel-debug-debuginfo-2.6.18-348.32.1.el5.ia64.rpm	SHA-256: aa1da5607abc8610cb3e7f46eafed5f5df3b2834d0afcf406818b1cc87056abd
kernel-debug-devel-2.6.18-348.32.1.el5.ia64.rpm	SHA-256: 391a48ff1703182c7d913f478b5986ea5ac05799d0f09793d490158c0ce12b1d
kernel-debuginfo-2.6.18-348.32.1.el5.ia64.rpm	SHA-256: d613e2169f8262f390fc54a03df5493d9c4c983dbdda9bf5faaeef499662587f
kernel-debuginfo-common-2.6.18-348.32.1.el5.ia64.rpm	SHA-256: d7517529ed5f5b697d6624c2bac422bb6b62a947ca02f2d7b9f94ec4f83fb7a1
kernel-devel-2.6.18-348.32.1.el5.ia64.rpm	SHA-256: 5f869fa71c6871d5c0d1dac0d479e5e75e6251e88f7d8f5d38583e3352e63160
kernel-doc-2.6.18-348.32.1.el5.noarch.rpm	SHA-256: cf542fb28132b39dcb54b191cbd1b66158a01466bab963b4d3fc97dfb4d62b98
kernel-headers-2.6.18-348.32.1.el5.ia64.rpm	SHA-256: 2388f9ae05026990281e7b4e26b71b65b3052d989d304ec7cd3d4afb894ffd20
kernel-xen-2.6.18-348.32.1.el5.ia64.rpm	SHA-256: 8d6c6642f0dab6bae829f2a206ec0776d7496527f3e88e3a50574a829ddb9248
kernel-xen-debuginfo-2.6.18-348.32.1.el5.ia64.rpm	SHA-256: 516fcd8a840c67a3662b7b9ba61b402c3d70b4a28d307662c0b05d3e38c03ad2
kernel-xen-devel-2.6.18-348.32.1.el5.ia64.rpm	SHA-256: 9b3354e17a2121f81d75e953c6901450932c8be5f94570884538a948f3fac17e
i386
kernel-2.6.18-348.32.1.el5.i686.rpm	SHA-256: 8729752ac83a45fcf896924696aad416fa832507316d559c4e5ccab4ac1cb299
kernel-PAE-2.6.18-348.32.1.el5.i686.rpm	SHA-256: 0d057e451f158690390016a90c9adda31a387c37452ac04421520d247c21c404
kernel-PAE-debuginfo-2.6.18-348.32.1.el5.i686.rpm	SHA-256: 01bdf265f0a266b7c5f43c1411ac06dac2f85b7c5793b4cc98d59ea2cdedeca0
kernel-PAE-devel-2.6.18-348.32.1.el5.i686.rpm	SHA-256: 18cfe762db6b4810dfb3f7c4a328dfcc273a0537e0da60c1c480abccb09cc3cd
kernel-debug-2.6.18-348.32.1.el5.i686.rpm	SHA-256: 6744034d2f3dd32875e223209f1fd97377e395f9f882adc6aaf4b0b43c80c5c5
kernel-debug-debuginfo-2.6.18-348.32.1.el5.i686.rpm	SHA-256: 7e79830066423141c00dad21d2102e4e9eabb22e8c988f54d63636e85cee8ea2
kernel-debug-devel-2.6.18-348.32.1.el5.i686.rpm	SHA-256: 194b7382c14daad0ec867185e8f519c9f8f72dfb0fa75c571382c04032a9b580
kernel-debuginfo-2.6.18-348.32.1.el5.i686.rpm	SHA-256: eeefdd41a77c78c6ed51d42effaf6b57dbb1babd6c68946b48819d7a6ae71a4d
kernel-debuginfo-common-2.6.18-348.32.1.el5.i686.rpm	SHA-256: e9e9a277d8d72dc0be0bc82aea9b103c6364bdd0c0d47f702b175e640755ffc5
kernel-devel-2.6.18-348.32.1.el5.i686.rpm	SHA-256: edf3847d740ca209b30a190867162dd04ddd66a386fb851a645ba3677165cb56
kernel-doc-2.6.18-348.32.1.el5.noarch.rpm	SHA-256: cf542fb28132b39dcb54b191cbd1b66158a01466bab963b4d3fc97dfb4d62b98
kernel-headers-2.6.18-348.32.1.el5.i386.rpm	SHA-256: 013704678f270ee226060f419a0bd3d4995e829b114ffd769ab99f90252c1c05
kernel-xen-2.6.18-348.32.1.el5.i686.rpm	SHA-256: b45e1dd02a7553212c585b4b9f107ce1d879b82a3351ef2775b85f4a49601cf0
kernel-xen-debuginfo-2.6.18-348.32.1.el5.i686.rpm	SHA-256: 75b8dc0d7923fa25c9e14d8e1efffc5b4f1b79ecbf388d9417df6c7ede7585aa
kernel-xen-devel-2.6.18-348.32.1.el5.i686.rpm	SHA-256: 408ae5e1e005da5d918dbd5f6f65bb728480466afecda46765cbf041811e45f7