7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.0004 Low
EPSS
Percentile
0.4%
CentOS Errata and Security Advisory CESA-2007:0937
The Linux kernel handles the basic functions of the operating system.
A flaw was found in the IA32 system call emulation provided on AMD64 and
Intel 64 platforms. An improperly validated 64-bit value could be stored in
the %RAX register, which could trigger an out-of-bounds system call table
access. An untrusted local user could exploit this flaw to run code in the
kernel (ie a root privilege escalation). (CVE-2007-4573).
Red Hat would like to thank Wojciech Purczynski for reporting this issue.
Red Hat Enterprise Linux 4 users are advised to upgrade to these packages,
which contain a backported patch to correct this issue.
Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2007-September/076413.html
https://lists.centos.org/pipermail/centos-announce/2007-September/076421.html
https://lists.centos.org/pipermail/centos-announce/2007-September/076426.html
https://lists.centos.org/pipermail/centos-announce/2007-September/076427.html
Affected packages:
kernel
kernel-devel
kernel-doc
kernel-hugemem
kernel-hugemem-devel
kernel-largesmp
kernel-largesmp-devel
kernel-smp
kernel-smp-devel
kernel-xenU
kernel-xenU-devel
Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0937
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
CentOS | 4 | ia64 | kernel | < 2.6.9-55.0.9.EL | kernel-2.6.9-55.0.9.EL.ia64.rpm |
CentOS | 4 | ia64 | kernel-devel | < 2.6.9-55.0.9.EL | kernel-devel-2.6.9-55.0.9.EL.ia64.rpm |
CentOS | 4 | ia64 | kernel-largesmp | < 2.6.9-55.0.9.EL | kernel-largesmp-2.6.9-55.0.9.EL.ia64.rpm |
CentOS | 4 | ia64 | kernel-largesmp-devel | < 2.6.9-55.0.9.EL | kernel-largesmp-devel-2.6.9-55.0.9.EL.ia64.rpm |
CentOS | 4 | s390 | kernel | < 2.6.9-55.0.9.EL | kernel-2.6.9-55.0.9.EL.s390.rpm |
CentOS | 4 | s390 | kernel-devel | < 2.6.9-55.0.9.EL | kernel-devel-2.6.9-55.0.9.EL.s390.rpm |
CentOS | 4 | s390x | kernel | < 2.6.9-55.0.9.EL | kernel-2.6.9-55.0.9.EL.s390x.rpm |
CentOS | 4 | s390x | kernel-devel | < 2.6.9-55.0.9.EL | kernel-devel-2.6.9-55.0.9.EL.s390x.rpm |
CentOS | 4 | i586 | kernel | < 2.6.9-55.0.9.EL | kernel-2.6.9-55.0.9.EL.i586.rpm |
CentOS | 4 | i686 | kernel | < 2.6.9-55.0.9.EL | kernel-2.6.9-55.0.9.EL.i686.rpm |