RHSA-2011:0928: Red Hat Security Advisory: kernel security and bug fix update

Published Jul 12, 2011
·
Updated

The kernel packages contain the Linux kernel, the core of any Linuxoperating system.This update fixes the following security issues: It was found that the receive hook in the ipipinit() function in the ipip module, and in the ipgreinit() function in the ipgre module, couldbe called before network namespaces setup is complete. If packets werereceived at the time the ipip or ipgre module was still being loaded intothe kernel, it could cause a denial of service. (CVE-2011-1767,CVE-2011-1768, Moderate) It was found that an mmap() call with the MAPPRIVATE flag on "/dev/zero" would create transparent hugepages and trigger a certain robustness check.A local, unprivileged user could use this flaw to cause a denial ofservice. (CVE-2011-2479, Moderate)This update also fixes various bugs. Documentation for these bug fixes willbe available shortly from the Technical Notes document linked to in theReferences section.Users should upgrade to these updated packages, which contain backportedpatches to resolve these issues, and fix the bugs noted in the TechnicalNotes. The system must be rebooted for this update to take effect.

Affected Software

46 affected componentsFixes available
redhat/kernel<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/kernel-bootwrapper<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/kernel-debug<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/kernel-debug-debuginfo<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/kernel-debug-devel<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/kernel-debuginfo<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/kernel-debuginfo-common-i686<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/kernel-debuginfo-common-ppc64<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/kernel-debuginfo-common-s390x<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/kernel-debuginfo-common-x86_64<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/kernel-devel<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/kernel-doc<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/kernel-firmware<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/kernel-headers<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/kernel-kdump<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/kernel-kdump-debuginfo<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/kernel-kdump-devel<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/perf<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/perf-debuginfo<0:2.6.32-131.6.1.el6
0:2.6.32-131.6.1.el6
redhat/kernel<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-debug<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-debug-debuginfo<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-debug-devel<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-debuginfo<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-devel<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-doc<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-firmware<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-headers<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/perf<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/perf-debuginfo<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-debug<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-debug-debuginfo<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-debug-devel<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-debuginfo<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-debuginfo-common-i686<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-devel<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-headers<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/perf<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/perf-debuginfo<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-debuginfo-common-s390x<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-kdump<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-kdump-debuginfo<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-kdump-devel<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-bootwrapper<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6
redhat/kernel-debuginfo-common-ppc64<2.6.32-131.6.1.el6
2.6.32-131.6.1.el6

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  2. Upgrade

    Upgrade redhat/kernel-bootwrapper to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  3. Upgrade

    Upgrade redhat/kernel-debug to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  4. Upgrade

    Upgrade redhat/kernel-debug-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  5. Upgrade

    Upgrade redhat/kernel-debug-devel to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  6. Upgrade

    Upgrade redhat/kernel-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  7. Upgrade

    Upgrade redhat/kernel-debuginfo-common-i686 to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  8. Upgrade

    Upgrade redhat/kernel-debuginfo-common-ppc64 to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  9. Upgrade

    Upgrade redhat/kernel-debuginfo-common-s390x to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  10. Upgrade

    Upgrade redhat/kernel-debuginfo-common-x86_64 to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  11. Upgrade

    Upgrade redhat/kernel-devel to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  12. Upgrade

    Upgrade redhat/kernel-doc to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  13. Upgrade

    Upgrade redhat/kernel-firmware to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  14. Upgrade

    Upgrade redhat/kernel-headers to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  15. Upgrade

    Upgrade redhat/kernel-kdump to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  16. Upgrade

    Upgrade redhat/kernel-kdump-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  17. Upgrade

    Upgrade redhat/kernel-kdump-devel to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  18. Upgrade

    Upgrade redhat/perf to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  19. Upgrade

    Upgrade redhat/perf-debuginfo to a version that resolves this vulnerability.

    Fixed in 0:2.6.32-131.6.1.el6
  20. Upgrade

    Upgrade redhat/kernel to a version that resolves this vulnerability.

    Fixed in 2.6.32-131.6.1.el6
  21. Upgrade

    Upgrade redhat/kernel-debug to a version that resolves this vulnerability.

    Fixed in 2.6.32-131.6.1.el6
  22. Upgrade

    Upgrade redhat/kernel-debug-debuginfo to a version that resolves this vulnerability.

    Fixed in 2.6.32-131.6.1.el6
  23. Upgrade

    Upgrade redhat/kernel-debug-devel to a version that resolves this vulnerability.

    Fixed in 2.6.32-131.6.1.el6
  24. Upgrade

    Upgrade redhat/kernel-debuginfo to a version that resolves this vulnerability.

    Fixed in 2.6.32-131.6.1.el6
  25. Upgrade

    Upgrade redhat/kernel-devel to a version that resolves this vulnerability.

    Fixed in 2.6.32-131.6.1.el6
  26. Upgrade

    Upgrade redhat/kernel-doc to a version that resolves this vulnerability.

    Fixed in 2.6.32-131.6.1.el6
  27. Upgrade

    Upgrade redhat/kernel-firmware to a version that resolves this vulnerability.

    Fixed in 2.6.32-131.6.1.el6
  28. Upgrade

    Upgrade redhat/kernel-headers to a version that resolves this vulnerability.

    Fixed in 2.6.32-131.6.1.el6
  29. Upgrade

    Upgrade redhat/perf to a version that resolves this vulnerability.

    Fixed in 2.6.32-131.6.1.el6
  30. Upgrade

    Upgrade redhat/perf-debuginfo to a version that resolves this vulnerability.

    Fixed in 2.6.32-131.6.1.el6
  31. Upgrade

    Upgrade redhat/kernel-debuginfo-common-i686 to a version that resolves this vulnerability.

    Fixed in 2.6.32-131.6.1.el6
  32. Upgrade

    Upgrade redhat/kernel-debuginfo-common-s390x to a version that resolves this vulnerability.

    Fixed in 2.6.32-131.6.1.el6
  33. Upgrade

    Upgrade redhat/kernel-kdump to a version that resolves this vulnerability.

    Fixed in 2.6.32-131.6.1.el6
  34. Upgrade

    Upgrade redhat/kernel-kdump-debuginfo to a version that resolves this vulnerability.

    Fixed in 2.6.32-131.6.1.el6
  35. Upgrade

    Upgrade redhat/kernel-kdump-devel to a version that resolves this vulnerability.

    Fixed in 2.6.32-131.6.1.el6
  36. Upgrade

    Upgrade redhat/kernel-bootwrapper to a version that resolves this vulnerability.

    Fixed in 2.6.32-131.6.1.el6
  37. Upgrade

    Upgrade redhat/kernel-debuginfo-common-ppc64 to a version that resolves this vulnerability.

    Fixed in 2.6.32-131.6.1.el6
  38. Remove

    Remove the affected component from your environment.

    After confirming the new kernel functions properly, use rpm -e to remove old kernels.

  39. Operational

    Reboot the system for the kernel update to take effect.

Event History

Jul 12, 2011
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Sep 15, 2024
Advisory Published
via OSV·07:14 PM
Data Sourced
via OSV·07:14 PM
DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of RHSA-2011:0928?

The severity of RHSA-2011:0928 is classified as important.

2

How do I fix RHSA-2011:0928?

To fix RHSA-2011:0928, you should update to the kernel version 2.6.32-131.6.1.el6 or newer.

3

Which software packages are affected by RHSA-2011:0928?

RHSA-2011:0928 affects various kernel packages including kernel, kernel-debug, and kernel-devel versions prior to 2.6.32-131.6.1.el6.

4

What vulnerabilities does RHSA-2011:0928 address?

RHSA-2011:0928 addresses security issues related to the ipip and ipgre modules in the Linux kernel.

5

Is RHSA-2011:0928 related to any specific Linux distributions?

Yes, RHSA-2011:0928 specifically pertains to Red Hat Enterprise Linux version 6.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203