RHSA-2014:1872: Important: kernel security and bug fix update
The kernel packages contain the Linux kernel, the core of any Linuxoperating system. A NULL pointer dereference flaw was found in the way the Linux kernel's Stream Control Transmission Protocol (SCTP) implementation handledsimultaneous connections between the same hosts. A remote attacker coulduse this flaw to crash the system. (CVE-2014-5077, Important)This update also fixes the following bug: This update fixes several race conditions between PCI error recovery callbacks and potential calls of the ifup and ifdown commands in the tg3driver. When triggered, these race conditions could cause a kernel crash.(BZ#1142568)All kernel users are advised to upgrade to these updated packages, whichcontain backported patches to correct these issues. The system must berebooted for this update to take effect.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2014:1872?
The severity of RHSA-2014:1872 is classified as important according to Red Hat's security updates classification.
How do I fix RHSA-2014:1872?
To fix RHSA-2014:1872, update your kernel to version 2.6.32-358.51.1.el6.
What is the impact of RHSA-2014:1872?
The impact of RHSA-2014:1872 includes a NULL pointer dereference flaw found in the SCTP implementation of the Linux kernel.
Which packages are affected by RHSA-2014:1872?
RHSA-2014:1872 affects various kernel packages, including kernel, kernel-debug, and kernel-devel versions prior to 2.6.32-358.51.1.el6.
Is there a workaround for RHSA-2014:1872?
There are no specific workarounds mentioned for RHSA-2014:1872 other than applying the relevant kernel update.