RHSA-2014:0949: Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linuxoperating system. It was found that the Linux kernel's ptrace subsystem allowed a traced process' instruction pointer to be set to a non-canonical memory addresswithout forcing the non-sysret code path when returning to user space.A local, unprivileged user could use this flaw to crash the system or,potentially, escalate their privileges on the system. (CVE-2014-4699,Important)Note: The CVE-2014-4699 issue only affected systems using an Intel CPU.Red Hat would like to thank Andy Lutomirski for reporting this issue.All kernel users are advised to upgrade to these updated packages, whichcontain a backported patch to correct this issue. The system must berebooted for this update to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2014:0949?
The severity of RHSA-2014:0949 is classified as important.
How do I fix RHSA-2014:0949?
To fix RHSA-2014:0949, you should update your kernel packages to version 2.6.32-220.53.1.el6.
What are the affected packages in RHSA-2014:0949?
The affected packages in RHSA-2014:0949 include kernel, kernel-debug, kernel-debug-devel, kernel-devel, and several others all requiring version 2.6.32-220.53.1.el6.
Is RHSA-2014:0949 a critical vulnerability?
No, RHSA-2014:0949 is not classified as a critical vulnerability but is still considered important due to its potential impact.
How can I verify my system's kernel version related to RHSA-2014:0949?
You can verify your system's kernel version by running the command 'uname -r' in the terminal.