Medium: kernel

Issue Overview:

The media_device_enum_entities function in drivers/media/media-device.c in the Linux kernel before 3.14.6 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory by leveraging /dev/media0 read access for a MEDIA_IOC_ENUM_ENTITIES ioctl call.

A flaw was found in the way the Linux kernel’s futex subsystem handled the requeuing of certain Priority Inheritance (PI) futexes. A local, unprivileged user could use this flaw to escalate their privileges on the system.

The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the “LECHO & !OPOST” case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.

Affected Packages:

kernel

Issue Correction:
Run yum update kernel to update your system. You will need to reboot your system in order for the new kernel to be running.

New Packages:

i686:  
    perf-debuginfo-3.10.53-56.140.amzn1.i686  
    kernel-headers-3.10.53-56.140.amzn1.i686  
    perf-3.10.53-56.140.amzn1.i686  
    kernel-3.10.53-56.140.amzn1.i686  
    kernel-debuginfo-3.10.53-56.140.amzn1.i686  
    kernel-debuginfo-common-i686-3.10.53-56.140.amzn1.i686  
    kernel-devel-3.10.53-56.140.amzn1.i686  
  
noarch:  
    kernel-doc-3.10.53-56.140.amzn1.noarch  
  
src:  
    kernel-3.10.53-56.140.amzn1.src  
  
x86_64:  
    kernel-headers-3.10.53-56.140.amzn1.x86_64  
    kernel-3.10.53-56.140.amzn1.x86_64  
    kernel-debuginfo-3.10.53-56.140.amzn1.x86_64  
    kernel-devel-3.10.53-56.140.amzn1.x86_64  
    kernel-debuginfo-common-x86_64-3.10.53-56.140.amzn1.x86_64  
    perf-3.10.53-56.140.amzn1.x86_64  
    perf-debuginfo-3.10.53-56.140.amzn1.x86_64  

Additional References

Red Hat: CVE-2014-0196, CVE-2014-1739, CVE-2014-3153

Mitre: CVE-2014-0196, CVE-2014-1739, CVE-2014-3153