RHSA-2006:0493: kernel security update

First published: Wed May 24 2006(Updated: )

The Linux kernel handles the basic functions of the operating system.<br>These new kernel packages contain fixes for the security issues<br>described below:<br><li> a flaw in the IPv6 implementation that allowed a local user to cause a </li> denial of service (infinite loop and crash) (CVE-2005-2973, important)<br><li> a flaw in the bridge implementation that allowed a remote user to </li> cause forwarding of spoofed packets via poisoning of the forwarding<br>table with already dropped frames (CVE-2005-3272, moderate)<br><li> a flaw in the atm module that allowed a local user to cause a denial </li> of service (panic) via certain socket calls (CVE-2005-3359, important)<br><li> a flaw in the NFS client implementation that allowed a local user to </li> cause a denial of service (panic) via O_DIRECT writes (CVE-2006-0555,<br>important)<br><li> a difference in "sysretq" operation of EM64T (as opposed to Opteron) </li> processors that allowed a local user to cause a denial of service<br>(crash) upon return from certain system calls (CVE-2006-0741 and<br>CVE-2006-0744, important)<br><li> a flaw in the keyring implementation that allowed a local user to </li> cause a denial of service (OOPS) (CVE-2006-1522, important)<br><li> a flaw in IP routing implementation that allowed a local user to cause </li> a denial of service (panic) via a request for a route for a multicast IP<br>(CVE-2006-1525, important)<br><li> a flaw in the SCTP-netfilter implementation that allowed a remote user </li> to cause a denial of service (infinite loop) (CVE-2006-1527, important)<br><li> a flaw in the sg driver that allowed a local user to cause a denial of </li> service (crash) via a dio transfer to memory mapped (mmap) IO space<br>(CVE-2006-1528, important)<br><li> a flaw in the threading implementation that allowed a local user to </li> cause a denial of service (panic) (CVE-2006-1855, important)<br><li> two missing LSM hooks that allowed a local user to bypass the LSM by </li> using readv() or writev() (CVE-2006-1856, moderate)<br><li> a flaw in the virtual memory implementation that allowed local user to </li> cause a denial of service (panic) by using the lsof command<br>(CVE-2006-1862, important)<br><li> a directory traversal vulnerability in smbfs that allowed a local user </li> to escape chroot restrictions for an SMB-mounted filesystem via "..\\"<br>sequences (CVE-2006-1864, moderate)<br><li> a flaw in the ECNE chunk handling of SCTP that allowed a remote user </li> to cause a denial of service (panic) (CVE-2006-2271, moderate)<br><li> a flaw in the handling of COOKIE_ECHO and HEARTBEAT control chunks of </li> SCTP that allowed a remote user to cause a denial of service (panic)<br>(CVE-2006-2272, moderate)<br><li> a flaw in the handling of DATA fragments of SCTP that allowed a remote </li> user to cause a denial of service (infinite recursion and crash)<br>(CVE-2006-2274, moderate)<br>All Red Hat Enterprise Linux 4 users are advised to upgrade their kernels<br>to the packages associated with their machine architectures and<br>configurations as listed in this erratum.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/description
• agent/event
• agent/first-publish-date
• agent/last-modified-date
• agent/references
• agent/remedy
• agent/severity
• agent/softwarecombine
• agent/tags
• agent/title
• agent/type
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2006:0493