- Vulnerability/
- RHSA-2007:0936
RHSA-2007:0936: Important: kernel security update
First published: Thu Sep 27 2007(Updated: )
The Linux kernel handles the basic functions of the operating system.<br>A flaw was found in the IA32 system call emulation provided on AMD64 and<br>Intel 64 platforms. An improperly validated 64-bit value could be stored in<br>the %RAX register, which could trigger an out-of-bounds system call table<br>access. An untrusted local user could exploit this flaw to run code in the<br>kernel (ie a root privilege escalation). (CVE-2007-4573).<br>Red Hat would like to thank Wojciech Purczynski for reporting this issue.<br>Red Hat Enterprise Linux 5 users are advised to upgrade to these packages,<br>which contain a backported patch to correct this issue.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/kernel | <2.6.18-8.1.14.el5 | 2.6.18-8.1.14.el5 |
| redhat/kernel | <2.6.18-8.1.14.el5 | 2.6.18-8.1.14.el5 |
| redhat/kernel-devel | <2.6.18-8.1.14.el5 | 2.6.18-8.1.14.el5 |
| redhat/kernel-doc | <2.6.18-8.1.14.el5 | 2.6.18-8.1.14.el5 |
| redhat/kernel-headers | <2.6.18-8.1.14.el5 | 2.6.18-8.1.14.el5 |
| redhat/kernel-xen | <2.6.18-8.1.14.el5 | 2.6.18-8.1.14.el5 |
| redhat/kernel-xen-devel | <2.6.18-8.1.14.el5 | 2.6.18-8.1.14.el5 |
| redhat/kernel-devel | <2.6.18-8.1.14.el5 | 2.6.18-8.1.14.el5 |
| redhat/kernel-headers | <2.6.18-8.1.14.el5 | 2.6.18-8.1.14.el5 |
| redhat/kernel-xen | <2.6.18-8.1.14.el5 | 2.6.18-8.1.14.el5 |
| redhat/kernel-xen-devel | <2.6.18-8.1.14.el5 | 2.6.18-8.1.14.el5 |
| redhat/kernel-kdump | <2.6.18-8.1.14.el5 | 2.6.18-8.1.14.el5 |
| redhat/kernel-kdump-devel | <2.6.18-8.1.14.el5 | 2.6.18-8.1.14.el5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of RHSA-2007:0936?
The severity of RHSA-2007:0936 is classified as important.
How do I fix RHSA-2007:0936?
To fix RHSA-2007:0936, upgrade to kernel version 2.6.18-8.1.14.el5 or later.
Which systems are affected by RHSA-2007:0936?
RHSA-2007:0936 affects systems running the Linux kernel on both AMD64 and Intel 64 platforms.
What is the nature of the vulnerability in RHSA-2007:0936?
The vulnerability in RHSA-2007:0936 involves improper validation of a 64-bit value in the IA32 system call emulation.
What packages are impacted by RHSA-2007:0936?
Packages impacted by RHSA-2007:0936 include kernel, kernel-devel, kernel-headers, kernel-doc, kernel-xen, and other related packages.
- agent/severity
- agent/type
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/title
- agent/description
- collector/redhat-errata
- source/Red Hat
- anchor-id/RHSA-2007:0936
- agent/software-canonical-lookup
- agent/event
- agent/trending
- agent/tags
- agent/source
- package-manager/redhat