RHSA-2009:1469: Important: kernel security update

First published: Wed Sep 30 2009(Updated: )

The kernel packages contain the Linux kernel, the core of any Linux<br>operating system.<br>This update fixes the following security issues:<br><li> Michael Tokarev reported a flaw in the Realtek r8169 Ethernet driver in</li> the Linux kernel. This driver allowed interfaces using this driver to<br>receive frames larger than what could be handled. This could lead to a<br>remote denial of service or code execution. (CVE-2009-1389, Important)<br><li> Tavis Ormandy and Julien Tinnes of the Google Security Team reported a</li> flaw in the SOCKOPS_WRAP macro in the Linux kernel. This macro did not<br>initialize the sendpage operation in the proto_ops structure correctly. A<br>local, unprivileged user could use this flaw to cause a local denial of<br>service or escalate their privileges. (CVE-2009-2692, Important)<br><li> Tavis Ormandy and Julien Tinnes of the Google Security Team reported a</li> flaw in the udp_sendmsg() implementation in the Linux kernel when using the<br>MSG_MORE flag on UDP sockets. A local, unprivileged user could use this<br>flaw to cause a local denial of service or escalate their privileges.<br>(CVE-2009-2698, Important)<br>Users should upgrade to these updated packages, which contain backported<br>patches to correct these issues. The system must be rebooted for this<br>update to take effect.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• agent/references
• agent/severity
• agent/description
• agent/type
• agent/event
• agent/remedy
• agent/softwarecombine
• agent/first-publish-date
• agent/last-modified-date
• agent/tags
• collector/redhat-errata
• source/Red Hat
• anchor-id/RHSA-2009:1469
• agent/title