Lucene search

K
redhatRedHatRHSA-2012:1156
HistoryAug 14, 2012 - 12:00 a.m.

(RHSA-2012:1156) Moderate: kernel security and bug fix update

2012-08-1400:00:00
access.redhat.com
48

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.7%

The kernel packages contain the Linux kernel, the core of any Linux
operating system.

This update fixes the following security issues:

  • An integer overflow flaw was found in the i915_gem_execbuffer2() function
    in the Intel i915 driver in the Linux kernel. A local, unprivileged user
    could use this flaw to cause a denial of service. This issue only affected
    32-bit systems. (CVE-2012-2383, Moderate)

  • A missing initialization flaw was found in the sco_sock_getsockopt_old()
    function in the Linux kernel’s Bluetooth implementation. A local,
    unprivileged user could use this flaw to cause an information leak.
    (CVE-2011-1078, Low)

Red Hat would like to thank Vasiliy Kulikov of Openwall for reporting the
CVE-2011-1078 issue.

This update also fixes several bugs. Documentation for these changes will
be available shortly from the Technical Notes document linked to in the
References section.

Users should upgrade to these updated packages, which contain backported
patches to correct these issues, and fix the bugs noted in the Technical
Notes. The system must be rebooted for this update to take effect.

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

5.7%