RHSA-2014:1668: Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linuxoperating system. A NULL pointer dereference flaw was found in the way the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation handledsimultaneous connections between the same hosts. A remote attacker coulduse this flaw to crash the system. (CVE-2014-5077, Important)This update also fixes several bugs and adds one enhancement.Documentation for these changes is available from the Technical Notesdocument linked to in the References section.All kernel users are advised to upgrade to these updated packages, whichcontain backported patches to correct these issues and add thisenhancement. The system must be rebooted for this update to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2014:1668?
RHSA-2014:1668 is classified as an important security vulnerability.
How do I fix RHSA-2014:1668?
To fix RHSA-2014:1668, update the kernel package to version 2.6.32-431.37.1.el6.
What systems are affected by RHSA-2014:1668?
RHSA-2014:1668 affects Red Hat Enterprise Linux version 6.
What specific flaw is addressed in RHSA-2014:1668?
RHSA-2014:1668 addresses a NULL pointer dereference flaw in the Linux kernel's SCTP implementation.
Is there a risk of system crash due to RHSA-2014:1668?
Yes, exploiting the vulnerability in RHSA-2014:1668 could lead to a potential system crash.