RHSA-2007:0993: Important: kernel security update

First published: Thu Nov 29 2007(Updated: )

The Linux kernel handles the basic functions of the operating system.<br>These new kernel packages contain fixes for the following security issues:<br>A memory leak was found in the Red Hat Content Accelerator kernel patch. A<br>local user could use this flaw to cause a denial of service (memory<br>exhaustion). (CVE-2007-5494, Important)<br>A flaw was found in the handling of IEEE 802.11 frames affecting several<br>wireless LAN modules. In certain circumstances, a remote attacker could<br>trigger this flaw by sending a malicious packet over a wireless network and<br>cause a denial of service (kernel crash). (CVE-2007-4997, Important). <br>A flaw was found in the Advanced Linux Sound Architecture (ALSA). A local<br>user who had the ability to read the /proc/driver/snd-page-alloc file could<br>see portions of kernel memory. (CVE-2007-4571, Moderate). <br>In addition to the security issues described above, several bug fixes<br>preventing possible memory corruption, system crashes, SCSI I/O fails,<br>networking drivers performance regression and journaling block device layer<br>issue were also included.<br>Red Hat Enterprise Linux 5 users are advised to upgrade to these packages,<br>which contain backported patches to resolve these issues.<br>Red Hat would like to credit Vasily Averin, Chris Evans, and Neil Kettle <br>for reporting the security issues corrected by this update.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/description
• agent/event
• agent/first-publish-date
• agent/last-modified-date
• agent/references
• agent/remedy
• agent/severity
• agent/softwarecombine
• agent/tags
• agent/title
• agent/type
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2007:0993
• agent/software-canonical-lookup
• package-manager/redhat