Lucene search

K
redhatRedHatRHSA-2012:0061
HistoryJan 24, 2012 - 12:00 a.m.

(RHSA-2012:0061) Important: kernel-rt security update

2012-01-2400:00:00
access.redhat.com
14

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

46.4%

The kernel-rt packages contain the Linux kernel, the core of any Linux
operating system.

This update fixes the following security issue:

  • It was found that permissions were not checked properly in the Linux
    kernel when handling the /proc/[pid]/mem writing functionality. A local,
    unprivileged user could use this flaw to escalate their privileges. Refer
    to Red Hat Knowledgebase article DOC-69129, linked to in the References,
    for further information. (CVE-2012-0056, Important)

Red Hat would like to thank JΓΌri Aedla for reporting this issue.

Users should upgrade to these updated packages, which correct this issue.
The system must be rebooted for this update to take effect.

6.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

46.4%