Rapid7 Vulnerability & Exploit Database

RHSA-2008:0612: kernel security and bug fix update

Back to Search

RHSA-2008:0612: kernel security and bug fix update

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
05/16/2008
Created
07/25/2018
Added
09/09/2008
Modified
06/21/2018

Description

The kernel packages contain the Linux kernel, the core of any Linuxoperating system.These updated packages fix the following security issues:These updated packages fix the following bugs:The Linux kernel has been updated to implement random UDP source portswhere none are specified by an application. This allows applications, suchas those using the GNU libc stub resolver, to use random UDP source ports,helping to make DNS spoofing attacks harder.BUG: warning at arch/ia64/kernel/iosapic.c:1001/iosapic_unregister_intr()Even after the "uhci_hcd" module was reloaded, there was no access to USBdevices. As well, on systems that have legacy interrupts,"acpi_unregister_gsi" incorrectly called "iosapci_unregister_intr()",causing warning messages to be logged.Red Hat Enterprise Linux 5 users are advised to upgrade to these updatedpackages, which contain backported patches to resolve these issues.

Solution(s)

  • redhat-upgrade-kernel
  • redhat-upgrade-kernel-debug
  • redhat-upgrade-kernel-debug-devel
  • redhat-upgrade-kernel-devel
  • redhat-upgrade-kernel-doc
  • redhat-upgrade-kernel-headers
  • redhat-upgrade-kernel-kdump
  • redhat-upgrade-kernel-kdump-devel
  • redhat-upgrade-kernel-pae
  • redhat-upgrade-kernel-pae-devel
  • redhat-upgrade-kernel-xen
  • redhat-upgrade-kernel-xen-devel

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;