(RHSA-2010:0676) Important: kernel security update

2010-09-0700:00:00

access.redhat.com

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.002 Low

EPSS

Percentile

52.6%

JSON

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

This update fixes the following security issue:

When an application has a stack overflow, the stack could silently
overwrite another memory mapped area instead of a segmentation fault
occurring, which could cause an application to execute arbitrary code,
possibly leading to privilege escalation. It is known that the X Window
System server can be used to trigger this flaw. (CVE-2010-2240, Important)

Red Hat would like to thank the X.Org security team for reporting this
issue. Upstream acknowledges Rafal Wojtczuk as the original reporter.

Users should upgrade to these updated packages, which contain backported
patches to correct this issue. The system must be rebooted for this update
to take effect.

OSVersionArchitecturePackageVersionFilename
RedHatanyppc64iserieskernel-devel< 2.6.9-89.0.29.ELkernel-devel-2.6.9-89.0.29.EL.ppc64iseries.rpm
RedHatanyx86_64kernel< 2.6.9-89.0.29.ELkernel-2.6.9-89.0.29.EL.x86_64.rpm
RedHatanys390kernel< 2.6.9-89.0.29.ELkernel-2.6.9-89.0.29.EL.s390.rpm
RedHatanyppc64kernel-largesmp< 2.6.9-89.0.29.ELkernel-largesmp-2.6.9-89.0.29.EL.ppc64.rpm
RedHatanyx86_64kernel-largesmp< 2.6.9-89.0.29.ELkernel-largesmp-2.6.9-89.0.29.EL.x86_64.rpm
RedHatanyia64kernel-devel< 2.6.9-89.0.29.ELkernel-devel-2.6.9-89.0.29.EL.ia64.rpm
RedHatanyppc64kernel-largesmp-devel< 2.6.9-89.0.29.ELkernel-largesmp-devel-2.6.9-89.0.29.EL.ppc64.rpm
RedHatanyx86_64kernel-xenu< 2.6.9-89.0.29.ELkernel-xenU-2.6.9-89.0.29.EL.x86_64.rpm
RedHatanys390kernel-devel< 2.6.9-89.0.29.ELkernel-devel-2.6.9-89.0.29.EL.s390.rpm
RedHatanys390xkernel-devel< 2.6.9-89.0.29.ELkernel-devel-2.6.9-89.0.29.EL.s390x.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	any	ppc64iseries	kernel-devel	< 2.6.9-89.0.29.EL	kernel-devel-2.6.9-89.0.29.EL.ppc64iseries.rpm
RedHat	any	x86_64	kernel	< 2.6.9-89.0.29.EL	kernel-2.6.9-89.0.29.EL.x86_64.rpm
RedHat	any	s390	kernel	< 2.6.9-89.0.29.EL	kernel-2.6.9-89.0.29.EL.s390.rpm
RedHat	any	ppc64	kernel-largesmp	< 2.6.9-89.0.29.EL	kernel-largesmp-2.6.9-89.0.29.EL.ppc64.rpm
RedHat	any	x86_64	kernel-largesmp	< 2.6.9-89.0.29.EL	kernel-largesmp-2.6.9-89.0.29.EL.x86_64.rpm
RedHat	any	ia64	kernel-devel	< 2.6.9-89.0.29.EL	kernel-devel-2.6.9-89.0.29.EL.ia64.rpm
RedHat	any	ppc64	kernel-largesmp-devel	< 2.6.9-89.0.29.EL	kernel-largesmp-devel-2.6.9-89.0.29.EL.ppc64.rpm
RedHat	any	x86_64	kernel-xenu	< 2.6.9-89.0.29.EL	kernel-xenU-2.6.9-89.0.29.EL.x86_64.rpm
RedHat	any	s390	kernel-devel	< 2.6.9-89.0.29.EL	kernel-devel-2.6.9-89.0.29.EL.s390.rpm
RedHat	any	s390x	kernel-devel	< 2.6.9-89.0.29.EL	kernel-devel-2.6.9-89.0.29.EL.s390x.rpm