CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
EPSS
Percentile
0.4%
CentOS Errata and Security Advisory CESA-2007:0936
The Linux kernel handles the basic functions of the operating system.
A flaw was found in the IA32 system call emulation provided on AMD64 and
Intel 64 platforms. An improperly validated 64-bit value could be stored in
the %RAX register, which could trigger an out-of-bounds system call table
access. An untrusted local user could exploit this flaw to run code in the
kernel (ie a root privilege escalation). (CVE-2007-4573).
Red Hat would like to thank Wojciech Purczynski for reporting this issue.
Red Hat Enterprise Linux 5 users are advised to upgrade to these packages,
which contain a backported patch to correct this issue.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2007-September/076424.html
https://lists.centos.org/pipermail/centos-announce/2007-September/076425.html
Affected packages:
kernel
kernel-PAE
kernel-PAE-devel
kernel-devel
kernel-doc
kernel-headers
kernel-xen
kernel-xen-devel
Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0936
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
CentOS | 5 | i686 | kernel | < 2.6.18-8.1.14.el5 | kernel-2.6.18-8.1.14.el5.i686.rpm |
CentOS | 5 | i686 | kernel-devel | < 2.6.18-8.1.14.el5 | kernel-devel-2.6.18-8.1.14.el5.i686.rpm |
CentOS | 5 | noarch | kernel-doc | < 2.6.18-8.1.14.el5 | kernel-doc-2.6.18-8.1.14.el5.noarch.rpm |
CentOS | 5 | i386 | kernel-headers | < 2.6.18-8.1.14.el5 | kernel-headers-2.6.18-8.1.14.el5.i386.rpm |
CentOS | 5 | i686 | kernel-pae | < 2.6.18-8.1.14.el5 | kernel-PAE-2.6.18-8.1.14.el5.i686.rpm |
CentOS | 5 | i686 | kernel-pae-devel | < 2.6.18-8.1.14.el5 | kernel-PAE-devel-2.6.18-8.1.14.el5.i686.rpm |
CentOS | 5 | i686 | kernel-xen | < 2.6.18-8.1.14.el5 | kernel-xen-2.6.18-8.1.14.el5.i686.rpm |
CentOS | 5 | i686 | kernel-xen-devel | < 2.6.18-8.1.14.el5 | kernel-xen-devel-2.6.18-8.1.14.el5.i686.rpm |
CentOS | 5 | x86_64 | kernel | < 2.6.18-8.1.14.el5 | kernel-2.6.18-8.1.14.el5.x86_64.rpm |
CentOS | 5 | x86_64 | kernel-devel | < 2.6.18-8.1.14.el5 | kernel-devel-2.6.18-8.1.14.el5.x86_64.rpm |