RHSA-2015:0870: Important: kernel security update

First published: Wed Apr 22 2015(Updated: )

The kernel packages contain the Linux kernel, the core of any Linux<br>operating system.<br><li> It was found that the Linux kernel's Infiniband subsystem did not</li> properly sanitize input parameters while registering memory regions from<br>user space via the (u)verbs API. A local user with access to a<br>/dev/infiniband/uverbsX device could use this flaw to crash the system or,<br>potentially, escalate their privileges on the system. (CVE-2014-8159,<br>Important)<br>Red Hat would like to thank Mellanox for reporting this issue.<br>All kernel users are advised to upgrade to these updated packages, which<br>contain a backported patch to correct this issue. The system must be<br>rebooted for this update to take effect.<br>

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/redhat-errata
• anchor-id/RHSA-2015:0870
• agent/title
• agent/severity
• agent/references
• agent/type
• agent/event
• package-manager/redhat